22 


23 


SELECT COMMITTEE TO INVESTIGATE THE 
JANUARY 6TH ATTACK ON THE U.S. CAPITOL, 
U.S. HOUSE OF REPRESENTATIVES, 


WASHINGTON, D.C. 


INTERVIEW OF: JULIE FARNAM 


Wednesday, December 15, 2021 


Washington, D.C. 


The interview in the above matter was held in room 5480, O'Neill House Office 


Building, commencing at 1:00 p.m. 


Appearances: 


For the SELECT COMMITTEE TO INVESTIGATE 


THE JANUARY 6TH ATTACK ON THE U.S. CAPITOL: 


EE SENIOR INVESTIGATIVE COUNSEL 
I \vesticative counset 


INVESTIGATIVE COUNSEL 


EE | \VestiGATive COUNSEL 
BE PROFESSIONAL STAFF MEMBER 


For JULIE FARNAM: 


LISA N. WALTERS, SENIOR COUNSEL, GENERAL LAW DIVISION, OFFICE OF THE GENERAL 


COUNSEL, UNITED STATES CAPITOL POLICE 


24 


25 


Mr. Sa Allright. This is an interview of Julie Farnam, conducted by the 
House Select Committee to Investigate the January 6th Attack on the United States 
Capitol, pursuant to House Resolution 503. 

Ms. Farnam, could you please state your full name and spell your last name for the 
record? 

Ms. Farnam. Julie Elizabeth Farnam, F-a-r-n-a-m. 

ies a’ | And I'd like to ask everyone in the room today to introduce 
themselves for the record, beginning with my colleague to the left. 


SSS Good afternoon. a I'm a senior 


investigative counsel on the House select committee. 


ee eal And then to my right. 
—$—- —— investigative counsel on the House select 


committee. 
eel al researcher on the House select committee. 
[i a4 And I'm going to ask now that your counsel introduce herself for 


the record. 
Ms. Walters. Lisa Walters, United States Capitol Police, Office of the General 
Counsel, senior counsel. 
This will be a staff-led interview, and members of course may 
choose to also ask questions if any of them join the call. Currently we don't have any. 
My name ‘i and | am investigate counsel for the select committee. 
Before we begin, I'd like to describe a few ground rules. 
There is an official reporter transcribing the record of this interview. Please wait 


until each question's completed before you begin your response, and we will try to wait 
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until your response is complete before we ask our next question. 

The stenographer cannot record nonverbal responses, such as shaking your head, 
so it is important that you answer each question with an audible verbal response. 

We ask that you provide complete answers based on your best recollection. _ If 
the question is not clear, please ask for clarification. If you do not know the answer, 
please simply say so. 

| also want to remind you that it is unlawful to deliberately provide false 
information to Congress and that you will have an opportunity to review the transcript 


once it is completed. 


cz 


Q So let's get started. I'm just going to start with some background 


EXAMINATION 


questions. 
Where do you work, Ms. Farnam? 
5A | work at the United States Capitol Police. 


Q = And what is your current title there? 


> 


| am acting director of Intelligence and Interagency Coordination Division. 

Q And what was your position back on January 6th of 2021? 

A | was the assistant director of the Intelligence and Interagency Coordination 
Division. 

Q Would you briefly describe your professional experience leading up to your 
time with Capitol Police? 

A | started with the Capitol Police in October of 2020, and, prior to that, | 
worked at the Department of Homeland Security from September 2005 until October 


2020. Most of that time was spent at Citizenship and Immigration Services, which is a 
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component of DHS, although | did a couple years at ICE as well. 

Q Okay. And what did you do for them during that time? 

A My most recent job before | came over here, | was a division chief. | 
oversaw the Immigration Vetting Division. So under me | had two branches; one was 
the Intelligence Watch at USCIS, and the other was a branch that did classified vetting of 
immigration cases that had national security concerns. 

Q Okay. 

What does the Intelligence and Interagency Coordination Division, which for the 
record we can refer to as "IICD" -- what does IICD do within Capitol Police? 

A So we are the intelligence arm of Capitol Police. So we research threats 
against Members of Congress as well as the Capitol complex. We complete intelligence 
assessments for a variety of things, whether it be demonstrations that are going to be 
happening on the Hill, events that Members will have in the field. And we hold 
briefings, intelligence briefings, things of that nature. 

Q_ And |think you mentioned this, but when were you hired as the associate 
director of the IICD? 

A _ The assistant director. 

Q_ Assistant. Excuse me. 

A Yes. In October 2020. 

Q Had that position been occupied previously? 

A 


No. 


Q And was anyone else hired as part of the IICD shortly after you were? 
A Yes. John Donohue was, as the director. 

Q Okay. Of the -- 

A Of IICD, yes. 
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Q What was your understanding of how the division of labor would ideally be 
split between yourself and the director of IICD? 

A | started a little bit before John Donohue. Wecall him "Jack." Sol started 
a little before Jack. And, when he came on board, | was primarily responsible for the 
day-to-day supervision of the staff on IICD, whereas he had more of the strategic vision 
and role. 

Q Okay. And what was your understanding as to why an assistant director 
was hired when that role hadn't been there previously? 

A My understanding as to why they hired a new director and an assistant 
director with significant intelligence experience for both of us was to completely revamp 
the team in the division. 

Q Under what circumstances had the prior director of IICD left? 

A He retired. 

Q Okay. Andso that vacancy wasn't created as a response of this need to 
revamp, but they figured this was a good time to revamp, given the retirement. Is that 
fair? 

A Yes, | think so. 

Q__Interms of how the division was split, as you just mentioned, between 
yourself and Mr. Donohue before January 6th, is that how it turned out in practice? | 
had asked you ideally how the split was supposed to go. Is that how it worked? 

A For the most part. 

Q Okay. 

A | think | did a lot of the -- there was -- | shared in the vision, in implementing 
the vision, with Jack Donohue. 


Q Okay. Was that a role that was larger than what you imagined originally? 
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Or was that part of what you thought, coming in, you would do? 
A | think, generally speaking, for both of us -- and | can't speak for him, 
but -- the challenges facing the team were much more than what we had expected. 


Q Okay. And I'll ask you a little bit about that -- 


A Uh-huh. 
Q_ -- but let me ask you just a little bit more preliminarily questions. 
A Uh-huh. 


Q Atthe start of your tenure, how many people were assigned to the IICD 
unit? And can you break down how many were analysts and how many were agents? 

A There were 11. And one was an agent, and she worked our midnight shift. 

Q_ And was that -- 

A __ And she -- 

Q Oh, I'm sorry. 

A Sorry. And she had been assigned there for a significant period of time, not 
as a task force officer, which we have now, but we didn't have then. There were -- it 
predated me, as to why she was reassigned there. 

Q Okay. Andso yousaid one agent. Does that mean the 10 others were 
analysts? 

A Yes, that's correct. 

Q_ And, at that time, you mentioned -- well, how did assignments out to Federal 
agencies, like DHS or FBI, work at that point? Did you have anyone assigned out to 
agencies? 

A We had one person assigned to DHS, the National Operations Center, one of 
the analysts. 


Q Can you name that person, please? 


A Eric Orsini. 

Q Okay. Noone else within IICD was detailed out; is that fair? 

A Sorry. There was -- I'msorry. | wantto amend my first answer. Tom 
Poliseno is an agent as well, and he was assigned to the National Joint Terrorism Task 
Force. And he was assigned to IICD permanently. 

Q Okay. Does that make it 12, then, total? 

A Yes. Uh-huh. 

Q Perfect. 

How does that work, if they are, as Mr. Orsini, out with DHS? 

A Uh-huh. He is embedded with DHS, and he is to provide us information 
that he's seeing while he's there at DHS. 

Same with Tom Poliseno, who's the agent at the NJTTF. The information that 
Poliseno provides is primarily classified, and he sends it to me via email on the high side. 

Q Okay. And is the information-sharing both ways, or is it meant primarily to 
flow to Capitol Police? 

A I'd say more with the NJTTF it was both ways. With DHS, it was -- I'll say, 
honestly, | don't think there was great information-sharing either way. 

Q Okay. And were those your feelings before January 6th, or -- 

A Yes, it was. 

Q Okay. 

When you arrived at IICD, was it mainly, in your opinion, an intelligence-gathering 
operation, an intelligence-sharing operation, or both? 

A Can | say neither? 

Q Sure. 


A It was more of an intelligence-consuming operation. 
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Q Okay. Can you describe that for me? 

A So the team was not adequately trained on how to collect intelligence. So 
there was some of it but more at a higher level, like a simple level, if you will. So we 
were dependent on getting a lot of the intelligence from other people or other sources. 

Q Okay. 

A And sometimes those sources would be internal to Capitol Police and 
sometimes external. 

Q That function, as primarily an intelligence-consuming but not one 
producing -- was that something you were aware of before you took the post, or did it 
take time for you to come to that realization? 

A | was not aware of it beforehand. | came to that realization quite quickly. 

Q- Andcan you tell me how? How did you come to that realization? 

A So the week that | started with Capitol Police was the week of Justice 
Barrett's confirmation hearing, so it was a very busy time and a very busy week. And, 
when | started, | would get taskings in. And, Norm, who was my predecessor, he was 
pretty hands-off. | didn't meet him right away. And, when | came on board, he 
seemed okay with me just taking over. 

So we would get taskings in, and I'd send them out to the analysts. And, as | 
mentioned, we had a very small number of analysts. And the responses | would get 
back from several of the analysts were, "Well, I've never been trained in doing that," "| 
don't know how to do that," "That's not my job," "We don't do that here." 

So it became apparent very quickly that we were not adequately serving the 
department. 

Q__Interms of Justice Barrett's confirmation hearings, what sort of products 


were you looking for the analysts to put out? 
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A Not necessarily products, but we would get information about 
demonstrations or information about threats or things that were going to happen on 
Capitol Hill or near Capitol Hill -- we tend to have some involvement if there's protests in 
front of the Supreme Court -- and asking them to research those sorts of things, not 
necessarily to produce a formal product, but to research things that were coming in that 
needed research. 

Q Okay. 

And, just for the record, you mentioned Norm. Is that Norm Ghrae? Was that 
the previous director of the IICD? 

A Yes. 

Q Okay. 

Did you institute any changes upon arriving at IICD? And what were they, and 
what were the purpose behind those changes? 

A | instituted a lot of changes. 

So some of the more significant changes that | instituted -- and it wasn't, like, my 
first week, but certainly before January 6th. They had not about issued their 
performance appraisal forms for FY'21 yet. They're normally issued in October but, 
come November, December, they hadn't been issued yet. Sol issued them. 

And, when | issued them, | included performance standards specific to their 
positions in the appraisal forms, which had not happened before. | didn't make them 
up. | stole them from DHS and what they use for their intelligence research specialists, 
or IRSes. Sol included that in their performance appraisals, so what they would need to 
do in order to meet expectations for the year. 

And then | sat down and met with each one of them individually and went over 


the expectations, made sure they were clear. All of the analysts signed for those forms, 
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those appraisal forms. 

The other thing that | did that was a major change for them: The team was split 
up into two groups; one was called the Open Source Section, and the other one was 
called the Intelligence Analysis Section. But what | found out pretty quickly was Open 
Source did open source, but 95 percent of everything the team did was open source 
intelligence. So to have one team that said they weren't doing open source didn't make 
sense to me, especially where we were such a small team. 

And so | had asked some of the analysts who were on that Intelligence Analysis 
team, you know, what they did, and they worked on assessments related to Members' 
travel or public congressional hearings. And so that concerned me a little bit, too, 
because we were in the middle of a pandemic and people weren't traveling a whole lot 
and there weren't any public hearings, so | wondered, what have you been doing for the 
past year? 

And then | said, well, okay, if that's what you do, where do you get the 
information to include in your assessments? And they said, well, we go to the Open 
Source Section, and they do the research for us, and then we put that in our assessments. 
And, to me, that makes them editors; it does not make they analysts. 

| also asked, because maybe | was just misunderstanding, and said, well, if that's 
open source, do you guys do the classified collection then? Because they do sit ina 
SCIF. And they said, no, we don't do that. 

So | eliminated those two sections and merged them into one. And it was sucha 
small team anyways, it made sense. 

| later learned that some of the reasons behind splitting the team was because of 
conflicts between some of the team members, to the point where some of the team 


members had sued each other. 
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Q Can you tell me how many people were in this sort of specialized Open 
Source Section and then how many were in the Intelligence Analysis Section? 

A I'd have to go back and look. 

Q Was it roughly half and half? 

A Roughly half and half, yes. 

Q If you could respond to some criticism about whether disbanding the Open 
Source Section involved removing analysts from their specializations -- 

A Uh-huh. 

Q - -- and maybe a concern that they were asked to do things that they didn't 
feel they had specialization in. 

A Yes. | have heard that criticism, particularly with Debbie McClellan. She 
was the de facto team lead on Open Source, and she did not take well to not having that 
lead role anymore, so much so that my very first meeting that | had with her -- never had 
met her, never had spoken to her -- she was belligerent, raising her voice, telling me that | 
didn't know what | was doing and that | needed to learn about the team before | tried to 
make changes. 

And she didn't like the way | was assigning work, and she told me that was her job, 
to assign work. And she said | was the supervisor -- she was the supervisor of the Open 
Source Section. And | asked her, | said, well, do you approve leave inthe system? Do 
you issue performance appraisals? And she didn't do any of those things. And | said to 
her, | said, my understanding is that you're not a supervisor. And she didn't take well to 
that. 

So she was so angry and disrespectful during that first conversation, very first 
conversation, | ended up writing her up 11 days into my job. So that's not how | wanted 


to get started with the team. 


24 


25 


13 


But I've heard her criticism, particularly as it relates to January 6th and that she 
was concerned that she was asked to research things that she didn't normally do. On 
January 6th and prior to January 6th, her role was primarily looking up open source stuff. 
That's a nondescript word, "stuff," but concerning posts, things of that nature. She was 
also responsible for pushing out updates related to protests, which is something that she 
had done for, my understanding, years before January 6th. 

So the duties that she was tasked with were very much in line with things she had 
previously done. 

Q Can you talk generally about how some of these changes were received by 
your team generally, not just with Ms. McClellan? 

A It depends. About half and half. Half were very receptive and were 
appreciative of the changes dealing with some of the issues the team had, and those 
analysts have really excelled over the past year or so. 

There were others who outright refused to get on board with the changes. Ms. 
McClellan was one; Eric Hore (ph) was another; Shelly Redmon; Kelly Ray; Kristen Burris, 
who was the agent assigned to midnights. She was actually reassigned after | got on 
board. 

Q Do you think any of these dynamics, the sort of division as you've laid it out, 
half the team being in support of some of the changes, half the team not -- 

A Uh-huh. 

Q_ --did any of that have an effect on the lead-up, the preparation, the 
intelligence stitching together, up to January 6th? Do you feel that that had any role to 
play? 

A No. And say that because | don't think most of the people | listed there 


had the skills and the knowledge to be expert intelligence analysts to begin with. So| 
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think the problems were not so much the changes; the problems were their skill level, 
and they didn't have the skills. 

Q After instituting this change, the major one being the, sort of, you know, 
putting together of the two teams -- 

A Uh-huh. 

Q_ --so, after the changes but before January 6th, would you say IICD was 
mainly at that period an intelligence-gathering operation, an intelligence-sharing 
operation, both, or neither? 

A More neither. | mean, we did some collection. We did almost no sharing, 
to be honest. But mostly consumers. 

Q Okay. 

And so none of the -- did you put in any changes before January 6th that were 
geared at fixing what you thought was a problem, which was that you were primarily just 
consumers of information? 

A Idid. Idid. | tried to start building relationships with our partners. | 
met with the Park Police, forexample. | met with MPD. | met with some other Federal 
and law enforcement partners to try to start to build that relationship and to be able to 
share information more readily and more freely. 

| also met with internal stakeholders within Capitol Police to get their feedback on 
IICD products, what changes they would like to see, how we can better support them. 
And then | incorporated some of those things in the changes that | made. 

One of the other things that | did was | started to standardize a lot of the products 
that we did and develop templates to make sure that our products looked professional 
but, not only that, contained consistent-quality information. Because, a lot of times, the 


team was just sending their findings in an email, whereas, like, | wanted to have a record 
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of what we were finding and make it professional and then send it off to where it needed 
to go. 

Q_ Andis it fair to say, then -- because you said that, by the time you reach 
January 6th, you still feel as though IICD was neither an intelligence-gathering or -sharing 
operation -- that -- is it a function of just time, why those changes didn't revamp IICD to 
one of those two -- 

A Yes. It was only -- 

Q- -- major roles? 

A Sorry. It was only 72 days between the time | came on board and the time 
January 6th happened. So changes take time, especially significant changes, and | was 
making hard changes. And | recognize that a lot of people don't necessarily like change 
and that's going to take time, but | saw that they needed to be done. And, 
unfortunately, in the middle of making these major changes, we had an insurrection. 

Q = Anddo you think that focus that you were trying to change but that still was 
unfortunately the focus, the consuming, do you think that that had a role to play in the 
preparation for January 6th? 

A Yes and no. _ | will say, when | came on board, | was reviewing a lot of the 
products that were coming out of IICD and | was doing a lot of the analytic work myself. 
So, with the January 3rd assessment, | wrote a good chunk of that on my own. 

And so, yes, we were hampered. It would've been much easier to have 11 
analysts who were completely capable of doing this and it was just a matter of me, like, 
proofreading it, rather than me doing a good chunk of the work myself. So, for sure, | 
mean, that was a problem still. 

Q Inthe lead-up to January 6th, how would you characterize the influence that 


IICD and intelligence more broadly had on the operational side of the department? 
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A Not much influence. And | think it's because IICD had such a bad 
reputation in the department. And that was an earned reputation. I'm not going to try 
to sugarcoat it. Like, the team was dysfunctional. It was underperforming. Everyone 
knew it. And the products that they were putting out prior to my arrival were not 
necessarily very good, so their products weren't taken very seriously. 

Q Okay. 

And so what was the process for sharing intelligence with leadership? This is 
before January 6th, of course, leading up to it. 

A | would provide it to Chief Gallagher primarily. 

Q Okay. What was the process for sharing intelligence with the rank-and-file, 
if there was one? 

A My understanding is that there wasn't. Or, | should say, rather, my 
understanding is, Chief Gallagher would distribute our products to other leaders within 
the department, and they were supposed to discuss the contents at roll call. 

Q Okay. Sois Chief Gallagher, then, sort of your point of contact for both 


getting it up to leadership and, whatever would get down to the rank-and-file, it's 


through him -- 
A Yes, 
Q- --was the process before January 6th? Is that fair? 
A Yes, 


Q AndI'm sorry, for the record, what was his position on January 6th? 
A 


He was deputy chief of the Protective Services Bureau. 


Q_ Andis IICD under the Protective Services Bureau? 
A Yes. 
Q In your opinion, those processes, the way to get it to leadership and to 
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rank-and-file, did that play a role in the proper preparation and lead-up to January 6th? 

A Can you repeat the question? 

Q Yeah. It'sinessence: Does the way that information is shared to 
leadership and, if at all, to rank-and-file, do you think that that process, the way it was 
done before January 6th, whether that played any sort of role in January 6th, in the 
preparation, in the lead-up to January 6th? 

A Just my personal opinion -- 

Q Sure. 

A --is: Forsure. | mean, I've heard it in post-January 6th. | attend roll 
calls quarterly. And those first couple roll calls were pretty rough, and officers were 
understandably quite angry. And one of the criticisms | heard -- and it's completely 
justified -- is that they never saw the assessment. 

Q Okay. 

My last sort of background, general question about IICD: How was the sharing of 
information within IICD? Was information-sharing encouraged among analysts? Or 
were analysts, who | understand are mostly working from home, were they siloed from 
one another as to -- and from what they were each seeing from one another, in the 
lead-up to January 6th? 

A It was strongly encouraged that they work together. And we also, Jack 
Donohue and |, strongly encouraged them to work with other divisions within Capitol 
Police. And we told them multiple times, like, if you have a question for an agent who's 
working a case that you're assisting with, talk to the agent, call them. 

So it was very encouraged. But, prior to both my arrival and Jack's arrival, that's 
not something they necessarily did. They stayed in their own -- like, just IICD, and there 


wasn't a lot of communication outside of the division. 
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Q And what was your understanding as to why that was when Norm Ghrae was 
in charge of IICD? 

A My understanding is that Norm would not let them speak to others. 

Q Okay. And that was -- your understanding, of course -- a formalized policy 
or just understood informally? 

A | think understood informally. | didn't see any formal policy. 

Q Okay. 

=a Unless anyone has any questions on this, the background? 


[Discussion off the record. ] 

oY 

Q = Sowhat about the sharing of intelligence with your law enforcement 
partners? What was that like, from -- again, | know you weren't there -- from your 
understanding, before you got there, during Norm Ghrae, and then before January 6th 
with yourself and Mr. Donohue as the new heads? 

A So, before | got there, my understanding is that there wasn't a lot of sharing, 
but with Jack and | coming on board, there was more sharing. Jack came from NYPD, so 
he had a lot of connections in the law enforcement community. | came from the 
Federal Government, so! had connections there. And so we worked to build those 
relationships and to share and be more collaborative with our intelligence partners. 

Q _Isit fair to say, given your earlier answer as to how IICD was still not sharing 
up to what you think it needed to -- did that -- by January 6th, it hadn't fully come to 
share with law enforcement to your expectations? 

A Correct. Correct. But! will say, particularly on January 6th and the few 
days before January 6th -- or, really, between the MAGA II march, which was December 


12th, and January 6th, there was a lot of sharing with Jack and | and our intelligence 
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partners, like, maybe near-daily calls. 

Q Okay. 

I'd like to get to the threat assessment of January 3rd. You've alluded to it a little 
bit. It's exhibit 4, if you want to look at it. And it was -- that final one was completed 
on January 3rd of 2021. 

A Yes. 

Q = You've alluded to it, but if you could formally tell me: What role, if any, did 
you play in the drafting and development of that document? 

A So, with this assessment -- and there were a couple earlier 
versions -- initially, | had tasked Stephan Horan on my team to write a draft of it. He 
wrote adraft. | didn't particularly like it, and | rewrote it. 

Separately, we were asked to update it maybe a week or so later. And | asked 
Debbie McClellan to write a draft, not giving her Stephan Horan's, because | wanted to 
see what she came up with on her own. And | also didn't like much of that either. 

So, leading up to this one, | took the good pieces out of those two drafts that we 
had and put it together with what we have here. And some sections of it, like the last 
section, | wrote exclusively. 

Q What about those initial assessments did you feel was not up to par? 

A So | don't think they were well-written, number one. | don't necessarily 
think they included pertinent information or drew the correct conclusions. 

Particularly with the one that Debbie did, a lot of it was -- she had a lot of good 
information there, but there was no analysis piece. So there were multiple pages of, 
okay, this Facebook page says that they're going to be coming, and this one does, and 
three people are interested, and six people liked it, or whatever it was. So it's good 


information, but | don't know if we needed, you know, 40 posts saying, like, all these 
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Facebook people are coming, rather than just saying there are multiple Facebook pages. 
Both of them concluded that the protests -- or, a lot of them are calling for 

peaceful protests. I'd have to go back and look at Stephan's version to see if he 

mentioned armed individuals. | know Debbie's did not mention the words "violence," 


WOT 


"violent extremists," "White supremacists," "militia." Those were things that did not 
appear in the assessment, and, to me, that lacked, based on what | was seeing. 

Q Okay. You may have mentioned this, | think, but did you use part of their 
assessments in crafting yours? 

A Yes. | took different pieces that | thought should go into the final one. 

Q Did Jack Donohue have any role or play a role in the drafting of that 
assessment? 

A Hedidn't draft. | believe he reviewed. 

Q What pieces of intelligence generally were you using in crafting this 
document? As in, what do you recall seeing that formed the basis for your assessment? 

A Sorry, can | go back to the previous question? 

Q Sure. Of course. 

So, on January 3rd, Chief Gallagher asked us to rewrite the conclusion. 
Because he was saying, you know, we're seeing lots of bad things. So he sent that to 
both Jack and |, and both Jack and | wrote a conclusion. 

And, when | sent mine, | sent it forward to Sergeant Cook, who is Chief Gallagher's 
assistant. And|said, "| wrote one. It might be too strongly worded. Jack also wrote 
one. I'll let you guys decide which one to put into the assessment." So Jack did draft 
something that didn't end up making it into the assessment. 

Q Okay. Are you saying that ultimately, then, the paragraph that you drafted 


was the one that was selected and used in the assessment? 
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A Yes. 

Q_ And, before that, when you had submitted the assessment first to Chief 
Gallagher, it did not include that overall analysis paragraph? 

A It did have an overall analysis paragraph, but most of the IICD products prior 
to this one had kind of, like, standard language. _Like, if you see -- it was, like, a "see 
something, say something"-type paragraph. 

And the content of it was the same, where we said there's going to be White 
supremacists and they're going to be armed and everything, but that concluding 
paragraph was a little bit different. 

Q Okay. 

My next question was about what pieces of intelligence generally were you using 
in crafting the document. So what do you recall seeing that formed the basis of you 
putting together, in particular, that last paragraph? 

A Uh-huh. So we saw a lot of social media posts talking about people coming 
armed. There were also meetings with the organizers of the events at the Ellipse and 
also at Freedom Plaza, so Cindy Chafian. We met with Kylie Kremer and Dustin Stanton, 
| think was his name, as well -- Kylie and Dustin being the organizers at the Ellipse that we 
were dealing with, and then Cindy Chafian being the Freedom Plaza organizer. 

So, between our -- and then, you know, MPD was collecting things, as well, and 
sending them over to us. NTIC was, which is the D.C. fusion center; they were sending 
things to us. Park Police had some things. Secret Service had some things. So we 
were just compiling everything that we had together. 

| will say, it was a lot of, not the same posts, but the same themes, like, people 
coming armed and were going to come to the Capitol. 


And then we also had -- the President himself was promoting the Stop the Steal 
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protest. And it had a website, wildprotest.com. And so that was supposed to be on 
Capitol Grounds in Areas 8 and 9, which is over by the Supreme Court, but that was not a 
permitted event. So we were seeing that, as well, promoted. 

And then also looking at websites like donald.win to see what people were saying. 

So all of that factored in to what we put in the assessment. 

Q Okay. Anything in particular that stood out to you? + You mentioned some 
specifics about armed and about coming to the Capitol. Was there any, sort of, pieces 
of intelligence that really stood out? 

A We saw, you know, extremist groups, like the Proud Boys, for example, 
indicating that they were going to be coming. And just knowing what the MAGA | and 
MAGA II marches were and kind of the type of people they attracted, that helped to 
inform what we put in this assessment as well. 

Q Okay. 

And is there a reason that the threat assessment was final by January 3rd and was 
not continually updated as more intelligence came in on the 4th, the 5th, and the 
morning of the 6th? 

A | think because a lot of the intelligence that came in after that was not 
necessarily new information or themes that weren't already captured in the assessment. 

Q Okay. Was there a way in which updates could be communicated, if not 
formally, informally? 

A Yes. We hada briefing on January 4th and then also one on the morning of 
January 6th. 

| think, now -- like, | was new then. Now, | would just proactively write an 
updated assessment. Back then, like, | was only writing updates if one was requested. 


Q Okay. And sois it fair to say none was requested later than January 3rd? 
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A Correct. 

Q Andsol'll read for the record that overall -- or, at least the sort of important 
part of the overall analysis paragraph that we just alluded to. 

Quote, "This sense of desperation and disappointment may lead to more of an 
incentive to become violent. Unlike previous post-election protests, the targets of the 
pro-Trump supporters are not necessarily the counterprotestors, as they were previously, 
but, rather, Congress itself is the target on the 6th." 

Ms. Farnam, do you think that warning, particularly that Congress itself was the 
target and not counterprotestors like the previous two MAGA marches, do you think that 
warning was properly heeded by the leadership at Capitol Police? 

A Probably not. 

But | will say -- like, | don't mean to, like, throw anyone under the bus here, but | 
think it's such an unusual concept. It's not something that -- when we deal with 
protests, it's always protestors and counterprotestors. Like, what are they upset over? 
Or they're protesting a policy. We've never seen something where, like, Congress and 
the duties of Congress was being targeted. 

You can get upset with a Member of Congress because you don't like their 
position ona certain bill. That's different than saying all of Congress, as they're trying to 
do their democratic duties, is the target. 

Q Did you have any discussions, potentially with Chief Gallagher, about that in 
particular, the Congress being the target, in preparations for January 6th or discussions 
surrounding, you know, the use of the National Guard, anything like that? 

A To the first question, | don't recall having any of those conversations. 

For the second one, | did ask on Tuesday if the National Guard was going to be 


coming. 
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And who were you speaking with at that point? 


> 


Chief Gallagher. 

Q Okay. And what were you told? 

A They would be assisting with traffic stops and street closures and things of 
that nature. 

Q_ And, given what you had been seeing in terms of intelligence, did you have 
any sort of reaction, either personally -- | don't know if -- to him or internally, as to that 
answer? 

A Yes, | definitely did. | said, | don't know if we need them to help with street 
closures. | wasn't asking because | was worried about whether or not someone can 
drive down a street. 

Q_ Right. 

Anything else about that conversation after you mentioned that? 

A No. It was just very brief. It was in passing. 

Q Okay. 

| know on the morning of January 6th you were at the command center briefly. 
Is that correct? 

A Yes, that's correct. 

Q_ And that, in the morning, something caused you concern enough that you 
moved your -- or you asked your au pair to move your children. Can you tell me about 
that? 

A Yes. Sol went up probably just before lunchtime to the command center, 
just for a couple minutes, and | saw all the screens, and it was like before there's going to 
be atornado. There wasa lot of activity. Like, just the whole environment, the air 


was -- there was something amiss there. 
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So there was a lot of activity down at the Ellipse and down at Freedom Plaza, but, 
to me, it seemed like the rest of the city was pretty silent. And that was worrisome. _ It 
felt like there was going to be a storm. 

And | was so concerned -- because my children were at a learning pod on Capitol 
Hill, because they weren't going to regular school because of the pandemic -- that | went 
downstairs and called my au pair and said, "Come get the kids now." And | remember 
her saying, "Well, can | have lunch first?" And was like, "No, you can't. Come get 
them now." And she did, and she got them off Capitol Hill and out of the city. 

Q_ That warning -- the paragraph, right? -- became effectively the last 
substantive page of the threat assessment. 

A Uh-huh. 

Q_ It's page 13 of 15, where the last two pages are largely footnote citations. 

Yes, 

Qs Inhindsight, do you think it would've been more -- it would've had more of 
an effect -- excuse me -- if it had appeared on the first page of the assessment? 

A Yes. But think with a lot of intelligence reports the analysis comes at the 
end. 

And | think part of -- and it's a valid criticism -- is helping -- and this is something 
that I've been working on since I've been here at Capitol Police, is helping them be better 
consumers of intelligence. Because the officers don't necessarily know what they're 
looking at, they don't understand intelligence, they don't know how to operationalize the 
intelligence. 

But, | mean, | will say, for the first page of the assessment, the third bullet on the 
top of the first page, it says, "Some protestors have indicated they plan to be armed. 


There is also indication that White supremacist groups may be attending the protest." If 
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| saw that on the first page, that's concerning to me -- that would be concerning to me, 
and |, for sure, would want to read this report. 

Q Okay. 

If we could go to the second page of the assessment, it reads, quote, "The 
protests/rallies are expected to be similar to the previous Million MAGA March rallies in 
November and December 2020, which drew tens of thousands of participants." 

Part of the, sort of, last paragraph is saying that January 6th, in your estimation, 
would have been different from the two previous MAGA marches, in which there was 


violence, but if there were skirmishes, most of it was counterprotestors and obviously 


nothing -- 
A Uh-huh. 
Q_ --to the scale that we saw on January 6th. 


In hindsight, what do you think about that? Might that have undercut, 
particularly as it came earlier in the document, this paragraph, your later warning that 
this third demonstration might be different from the previous two? 

A Yes. lagree. | think, you know, in retrospect, | would've rephrased that. 

| think this one was talking specifically about the numbers and types of 
participants and not whether or not they were going to be more or less violent. And 
certainly that could've been phrased differently and phrased better to be more clear. 

Q And|kind of want to point you, if you can, to exhibit 30. You'll see that this 
is the Civil Disturbance Unit, or CDU, Operational Plan created on January 5th. And, on 
its first page, listed is that paragraph noting that, you know, January 6th would be similar 
to the demonstrations on November 14th and December 12th of 2020. 

A Uh-huh. 


Q But, unfortunately, nowhere in the document does it reprint your 


24 


25 


27 


warning about how January 6th might be different. 

Is that something you noticed? Is that something that, looking at it in hindsight, 
maybe may have been a mistake, that in the CDU Operational Plan they took that first, 
sort of, indication and not necessarily your last paragraph? 

A Uh-huh. Yeah. | mean, this is the first time I'm seeing this, but, just 
looking at it quickly, | think this whole paragraph is misleading. Because it talks about 
antifa and counterprotestors, and that wasn't the concern at all. | don't even know if 
“antifa," that word, appears in the assessment. So this whole paragraph appears to me, 
in reading it the first time, to be misleading. 

And | will say, one of the things that has changed is that there's consultation with 
my team and with me before these things are finalized now. And | have, like, rewritten 
some of the things that were going to be in it to make sure that the intelligence is 
accurate and the assessment is accurate. 

But this -- this is misleading. 

Q_ Andso, before January 6th, did you or your team or Mr. Donohue, as far as 
you knew, have any role in crafting, in editing, in influencing the operational plans on the 
other side of the department? 

A No, | never did. 

Q Back to the threat assessment, if we could, which is No. 4, exhibit 4, it 
included language that, quote, "no groups are expected to march, and all are planning to 
stay in their designated areas," but also that, quote, "participants will gather at the Ellipse 
and march to the U.S. Capitol in support of President Trump." 

A Uh-huh. 

Qs Inhindsight, do you think that those findings are either confusing or at odds, 


or can they be reconciled? 


A | think they can be reconciled. | think that was referencing the permitted 


groups. And there were eight or nine for that day. And none of those permitted 


groups were expected to march. 
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Q Okay. So you think the permitted groups at the U.S. Capitol were the ones 


that were not expected to march; the ones at the Ellipse are, according to the 


assessment. 
A Uh-huh. 
Q Okay. 


The threat assessment also found that, quote, "the number of people who 


indicate they are going to the event listed on these social media postings is relatively 


A Yes. 

Qs Inhindsight, do you think that that properly conveyed the number of 
demonstrators to expect? 

A | think -- what page are you looking at? 

Q- Oh, sure. 

Oh, yeah. And|have it highlighted. It's page 3, right at the top. 

A Okay. 


Q  Oh,no. Notatthetop, though. Excuse me. It's on page 3. 


aa It says "no groups are expected to march." 


aan Yeah, but now we're at "the number of people who indicate they 


are going to the event." 


7 


Q_ Ah,5-- excuse me -- 1, 2, 3, 4,5, inthe middle. The paragraph starts with 


"ICD has identified." 
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A Okay. Yes. Andthisis accurate. We did identify about 40 social media 
postings, and all of them had, like, 10 people are going, 10 people are interested. So 
that is accurate with regards to those social media postings. 

Q_ Right, but it does leave the impression that the number of attendees is going 
to be low. 

A I'd have to go back and -- not necessarily, because we do say on the previous 
page that these previous marches drew tens of thousands of participants. That's on 
page 2. 

Q_ Right, the two previous MAGA marches? 

A Uh-huh. 


Vt I'm going to move over to the conference call unless anyone has 


any questions about the threat assessment? 


ee | have a couple, if you don't mind. 


Go ahead. 
DY 
Q_ So, Ms. Farnam, going back to the paragraph that appeared at the bottom, 
you said earlier, if | recall, that Assistant Chief Gallagher had the opportunity to make 
some edits to earlier drafts of that assessment. Was the placement of that paragraph 
part of those edits? 
| guess I'm trying to get an understanding of was whether or not where it was 
placed deliberate or sort of as a result of multiple drafts moving back and forth. 
A No. Like, that was always in that location in the assessment. 
Q_ And, in some of the products we've seen, they have what's known asa 
"BLUE" -- 


A Uh-huh. 
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-- bottom line up front. 


> 


Yes. 

Q Is that paragraph -- would you consider that paragraph a BLUF or not? 

A | think now it would be. Or we would take pieces of that. Like, Congress 
is going to be targeted, that might be important to put inthe BLUF. But, at the time, we 
weren't doing BLUFs at all. And sol had to explain to the team what a BLUF was. 

Q_ Isee. 

Thanks. Those were the questions | had. 

a 

Q_ I|just have a question. | just wanted to take a step back on the collection 
versus consumer, the conversation from before. And I'm sure, coming into it, you're 
aware they weren't a collector under the IC community -- 

A _ Right. 

Q = Socould you just explain, when you came to IICD, what you thought their 
role should be, knowing that they're not collectors as deemed by Title 50 or whatever? 

A Right. | think, even though they're not collectors -- like, there's different 
types of collection, right? 

Q Uh-huh. 

A You know, we don't have human sources and things like that that the IC 
would. But, certainly, particularly where we are dealing primarily with open source, 
they should be proactively seeking out information, information about threats, and 
identifying those threats proactively. 

And so, in that sense, we weren't doing that. And that's what | mean where we 
weren't necessarily collecting. 


Q Okay. So were there any, kind of, guardrails in what they could do with 
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their open source searching? Meaning, | think what you're saying is, they could do 
more -- 

A Uh-huh. 

Q_ -- but what could they have been doing? 

A They could have been proactively searching some of the more concerning 
sites, like donald.win. There were a couple searches that we did, but they were 
assigned out tothem. And if they -- 

Q  Whodoesthe assigning? Sorry to interrupt. 

A | did the assigning. 

Q__ So, as part of what the 11 folks underneath you were doing, you were also 
kind of mining and culling donald.win and whatever websites? 

A We should've been doing that. There were a couple postings on 
donald.win, and | don't know how they came to my attention, but | specifically assigned 
those out to people on the team to research further. 

But | think, you know, today, where we know some of the bad guys on the 
internet hang out, we will regularly review, like, Telegram, and we'll regularly review, like, 
Gettr and Parler and BitChute and Gab and some of the other, like, icky alternative social 
media sites. And we should be looking for that, because they are often posting 
concerning comments. 

Q Uh-huh. 

A But we weren't doing that as routine back then. 

Q And howare these kind of research assignments memorialized, in the sense 
of -- obviously we see the special assessments; there's the daily intelligence reports. But 
what mechanism is there within IICD to say, hey, let's drill down on this? 


A So, back then, there really wasn't anything. One of the things that | did 
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change was, | have a template form where they can capture their research and make sure 
that they were checking all the things they needed to check. And it had -- 

Q What are some of those things they need to check? 

A So, when we get a threat or we identify a threat, we need to try to 
proactively identify who made the threat and then also get a picture of what their online 
footprint is. So we have maybe 10 or 12 different places they should be checking on the 
internet to see if we can find out more information about that individual. 

And then there's an "analyst note" section where they should say, oh, well, this 
person actually has, you know, 10 threats on their website even though, you know, 
originally it only came to us with one threat, where they can explain more about what 
they found. Or, this appears to be their wife, and they work at this place. 

So we have that form now, which didn't exist prior to that. 

We also have a tracker now where any threat that we research we include on this 
tracker. And that's helpful, too, so if, you know, 2 months from now someone with the 
same social media handle comes up and has another threat, we can go back to that 
previous report we did and then just recheck the stuff that we had. Soit's more 
efficient as well. 

Q Okay. No, it sounds like you're implementing all the right things here. 

| just want to take a bigger step back as we kind of look at the intelligence 
community, you know, the FBI, DHS, the Federal partners. There's a number of, you 
know, kind of, steps they have to take before they reach the threat assessment, before 
they're able to draw one. 

A _ Right. 

Q_ There's issues of First Amendment concerns and threshold predicates, all 


these things. 
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Right. 

Do you have those kinds of guidelines? 

Not in the sense that | think what you're talking about. 
Okay. 


| mean, when we receive a threat or we identify a threat, we research it, and 


then we provide it over to our Investigations Division, and they will make the decision. 


So it might be more of a question for them, because they'll make a decision whether or 


not to pursue, like, a criminal investigation. Some of them might not rise to that level, 


but my team is tasked with still doing the preliminary scrub of it and then providing that 


information to the agents. 


Q 


|see. | might come back to that, but that's helpful. 


fii al Sounds good. 


Q 


oY 


Let's move to a conference call that | know -- a briefing that you and Jack 


Donohue held on January 4th highlighting the warning from the January 3rd assessment. 


A 


Q 


a 


invite. 


p 


> 


> Pp 


Uh-huh. 

Who spoke at that briefing? 

| did. 

Okay. And who was invited to attend? 


| don't know. I'd have to look at the calendar invite. | did not send the 


Okay. Do you recall generally who you were told you were speaking to? 
Capitol Police leadership. 
Okay. So the idea was that it should've been sent to leadership. 


Yes. 
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Q = You just don't know -- you can't tell me "inspectors and above," that sort of 
thing. 

A I'd have to look. 

Q Okay. 

And at the time, too, | was pretty new, so these names were not familiar to 
me. Anda lot of them aren't here anymore, so I'd have to probably ask who those 
people were. 

Q- Okay. Did it go as high as Chief Sund, or you're not quite sure? 

A My understanding is that Chief Sund was not invited. 

Q Okay. Is there anyone, any name that you can tell me you know was 
invited? 

A Chief Gallagher, Chief Pittman were there for sure. And |'m not sure who 
else. 

Q- And_| actually do want to drill down on whether they actually attended. 
You said that they were there. Do you mean that you know that they attended or that 
they were invited? 

A Well, | was sitting with Chief Gallagher, so | know he was definitely there. 

Q Okay. 

A And | do believe that Chief Pittman was there, because | think she asked me 
some questions after about it. 

Q Okay. Because this was a conference call, right? 

A Yes. 

Q_ It wasn'ta video -- 

A Yes. 


Q -- call. 
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A Uh-huh. 

Q Okay. 

And you provided your contemporaneous notes to the committee, 
select committee, regarding what was spoken about at this briefing. They're exhibit No. 
31. 

Were these before the call as preparation for what you were going to brief them 
or during the call as notes? 

A No, no,no. | wrote them -- these were, like, my talking points for the call. 

Q__ So, using those notes, if you want, as a reference, in essence, what did you 
relay to Capitol Police leadership in this briefing? 

A So | said there were a couple big events that were going to happen on the 
6th. One was the Women for America First, the march for Trump, and the President 
was going to be speaking there at 11 o'clock. And they did have a permit for that event, 
and they amended the permit to say that there were going to be 20,000 people. 

I'm not sure -- oh, "FOX News, 3 million." Kylie Kremer was on FOX News to talk 
about this event, and she's like, "Oh, we're going to have 3 million." | was like, you think 
you're going to have 3 million? So that's why that was there. 

And then | talked about the Stop the Steal event, which was an unofficial event 
because it wasn't permitted. These are the Members of Congress that we believe were 
invited to attend. It was being promoted by the President. 

And the two bottom things don't have anything to do with that. That was just 
something else. 

And then | said: Supporters see this as the last opportunity to overturn the 
election. There was disappointment and desperation amongst the protestors, and this 


could be an incentive to become violent, because they have nothing left to lose. The 


24 


25 


36 


targets are not the counterprotestors; the target is Congress. The protests are heavily 
publicized. Stop the Steal has a propensity for attracting White supremacists, militia 
groups, groups like the Proud Boys. There are multiple social media posts saying that 
people are going to be coming armed, and it's potentially a very dangerous situation. 

And then | mentioned that the counterprotestors have been really quiet; they're 
not organizing. And then, later, we learned that some of the groups -- well, one of the 
ones that had the permit just didn't show up. And then some of the other groups, like 
ShutDownDC, | think they put something out to their members saying they were going to 
go feed the homeless in, like, a different part of the city on that day. 

Q_ And what was the response at the other end of the call? 

A | did not receive any questions. 

Q_ As far as you could tell, did anything change -- or was anything told to you 
that would be changed as a result of either your briefing or -- as a result of your briefing? 

A | didn't have any visibility on that. 

Q_ | want to run through some individual intelligence that was received by the 
IICD -- 

A Okay. 

Q_ --inthe lead-up to January 6th -- well, actually, ——+ || has something. 

2 

Q___ | just want to go back to the call for a second. 

So you stated that you didn't receive any response to the briefing points. How 
did that strike you at the time? 

A It was something that | had noticed when | had other conversations with 
leadership, not specific to January 6th, that | was surprised by the lack of questions. 


And that was where | first realized that | need to help them become better 
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consumers of intelligence, because -- and it's interesting now, too, because | do biweekly 
classified briefings, and in the mornings | do it with just Capitol Police leadership, and in 
the afternoons | do it with the Sergeant at Arms. And particularly General Gibson, she's 
got an intelligence background. And to hear the questions she asks versus the questions 
that | get in the morning, it's like night and day. 

So we're working on it and, like, the difference between raw intelligence and 
finished intelligence and trying to educate them as to what those sorts of things are. 

Q_ And if | could just go backwards a little bit, back to when you were 
discussing, sort of, what the teams do. And | apologize that | didn't ask this earlier. 


But | think | recall you saying that there's an open source side and there's a high side side, 


right -- 
A Uh-huh. 
Q - --and that most of the collection that you do is on the open source side. 
Uh-huh. 


Q On the high side, is there any collection going on there, or is it just to receive 
from partners that happen to be classified information? 

A So, actually, neither. There was the Open Source, and there was the 
Intelligence Analysis side. The Intelligence Analysis side sat in a SCIF, but they did not do 
any collection of classified materials, which struck me as odd. 

So we do get classified things from -- particularly from Tom Poliseno, who's at the 
NJTTF, but the team is limited in the classified databases they have access to. And |'m 
not confident that they know how to search -- because classified databases are a little 
quirky, and the way you search them is not necessarily like you search Google. Andso| 
never got the sense that they had the knowledge on how to do, like, effective classified 


research. 


Q 


Thank you, ma'am. 
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[1:58 p.m.] 
BY 

Q | just want to clarify, actually. You mentioned that there were no questions 
for you, but | think a little earlier you did mention that you knew Chief Pittman was on the 
call because she had asked you questions. 

A That would be after the fact. She was very involved in the planning for the 
6th, and | know that she -- she would ask me questions about like numbers that | 
expected and things of that nature. So she did not ask questions on the call to clarify, 
but she did ask me questions after. 

Q Okay. And that led you to believe that she was certainly on the call 
because of how she was interacting with you afterwards? 

A Yes. Uh-huh. 

a I'm curious whether you thought the information you provided, 
whether it was in the January 3rd special assessment or during that call, impacted any 
preparations going into the 6th? 


Ms. Farnam. | don't know if it did or didn't. 


a) Okay. Go ahead. 
Cy 

Q Okay. | want to run through some individual intelligence received by IICD. 
If you turn to exhibit 1, you'll see an email forwarded -- one second -- an email forwarded 
to John Donahue, the director of IICD. 

A Yes. 

Q  ByanNYPD official as early as December 28th, 2020, noting, quote, assume 
you have, and this includes, the assessment includes, reference to social media postings 


such as protesters. These are social media postings saying protesters should start 
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marching into the Chambers; that they should show up with guns and threaten them with 
death; that -- regarding President Trump's tweet to attend the wild protests on 

January 6th, one user said, | read that as armed; that violent insurrection has always been 
the plan. Quote, Trump can't exactly openly tell you to revolt. This is the closest he'll 
ever get, but there is not enough cops in D.C. to stop what is coming. Quote, that there 
is -- this is war, and we're clearly in a post-legal phase of our society. Quote, be there on 
the 6th ready for 1776. Another quote says, fun fact: No revolution has ever been 
won without violence. And then another quote that talks about killing the opposition. 

Do you recall seeing this particular piece of intelligence? 

A I'm not sure. I'd have to go back and look. 

Q Okay. Can you talk to me about how IICD was structured in terms of this 
was sent to -- at the time, before January 6th, if this was sent to Mr. Donahue, how would 
it have made its way either to yourself or to other members of the IICD so that it could be 
put into the threat assessment, the larger threat landscape picture in order to share with 
the leadership? 

A He would've had to have forwarded the email to us. 

Q Okay. 

And he may have. _ | just don't recall. 

Q Okay. Inthe hindsight and in general, do you think the January 3rd 
assessment could've maybe used more listing of specific threats like these that would 
have flushed out what was forming the basis of the warning at the end of the 
assessment? 

A Sure. Yeah. 

Q  Dovyou recall, you know, any of the intelligence | just read, any of the 


postings that | just read, do any of them stand out as either different or more alarming or 
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along the lines of what you had been seeing previously? 

A They're along the lines of what we had seen. 

Q Okay. If wecan goto exhibit 2, you'll see an email from an HSEMA analyst 
on January 5th about a site requesting users to submit the addresses, work offices, and 
routes of, quote, enemies and Democratic Congressman. 

Do you recall if you saw this particular piece of intelligence? 

A | do believe | did. | know I'm not on this message, but | do recall seeing 
this. 

Q Okay. And what was the process for something as late as January 5th, 
right, after the assessment was drafted and when this email was sent out for intelligence 
like this to be forwarded to IICD and/or to USCP leadership? 

A So, with something like this, we would have sent it over to threats as well. 
It looks like they are not included on this message, so that's something that would go over 
to threats as well. And particularly with addresses of offices and residences, we would 
probably treat this as like a doxing almost and handle it that way. 

Q Okay. And the email mentions actually from the analyst from HSEMA that 
the threat does not meet the threshold for a SAR, which is a Suspicious Activity Report. 
From your experience in intelligence and at DHS, do you have an opinion as to why that 
might be so? 

A | don't know. They followed D.C.'s rules, and | don't know what their rules 
are exactly. 

Q Okay. Can you talk to mea little bit about intelligence more broadly in 
terms of whether the focus has been on domestic terrorism and whether that's 
something that should change? 


A It absolutely has not and it's been super frustrating even post-January 6th. 
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There's a hesitation -- and | get the hesitation because domestic terrorism is dealing with 
U.S. citizens and try not to collect on U.S. citizens. 

And so that's been part of the hesitation and even today, it's frustrating because 
there's information that | want from the IC that | -- that | just don't get because it is 
involving domestic terrorism. 

Q Let's turn to exhibit 3, and there it's the U.S. Capitol Police public 
information office inbox. It's forwarded on December 28th, 2020, online indications of 
storming the Capitol, and it was sent in by a civilian, Grace Spelman, a self-billed internet 
expert tracking far-right extremism. 

Do you recall if you saw this particular piece? 

A _|don't recall this email. 

Q Okay. Before January 6th, are you aware if the tips sent in to the public 
information office made their way to IICD? Andifso, how? 

A They didn't. | think it's relatively new that we receive them now, but we 
also have a new PIO. 

Q Okay. Sol suppose -- does that mean that the person in charge of manning 
this inbox, it would have been up to that person merely to get it rerouted to IICD? 

A Yes. And that happens as a matter of course now, but, prior to January 6th, 
| don't think | ever received a message from our public information officer. 


Q 9 Okay. 


—=- Can | ask a quick question 
ME So shee. 


4] Ms. Farnam, earlier you mentioned you said would have handled 
this as a doxing, what does that mean? 


Ms. Farnum. So doxing is where they take public officials, usually their personal 
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residences, and they publish that information on the internet, and it could be to 
encourage people to send them hate mail or to show up at their house, things of that 
nature. 

And so, when we see Members of Congress' personal addresses -- and we have a 
system that we use to pick these up automatically -- we would -- we would -- we would 
do research -- my team would do research to try to identify who was doing the doxing, 


and then we would send that to investigations. 


———$—>} Okay. Thank you, ma'am. 
oY 

Q_If--so go backto that example. Obviously, Capitol Police gets often or 
picks up on threats to Members of Congress throughout the year. 

A Yes. 

Q_ This one, in particular, is in relation to January 6th and the routes that 
Congressmen might take in order to try to block them or stop them. 

A Uh-huh. 

Q Do you think there was -- | see how, you know, individual threats need to be 


specific and are dealt with individually in terms of trying to track that person down. 


A Uh-huh. 
Q | know the investigation side does that. 
A Uh-huh. 


Q But was there an uptick in that sort of threat or in the lead up to January 6th, 
and is there some value in if you can't even track down that individual person and sort of 
seeing all the threats were generally strewn together a picture so that can influence how 
you prepare for the event? 


A It would influence. | will say, | don't recall seeing a lot of these types of 
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things. | will say because | just reviewed all the emails that | got on January 6th, and 
there were a few pertaining to Senator McConnell that came in the night before. And 
those we were actively looking at before everything happened on the 6th, but generally 
speaking, | didn't see a ton of posts about Members’ residence near the Capitol. 

Q Okay. 

A But we do handle these much differently now. 

Q | guess whose role and would it be yours to sort of see the big picture as 
people are individually looking at specific threats, tracking down the people who are 
making the threats, whose job would it be to keep track of it more generally so that a 
picture can be stitched together? 

A Probably me. Probably me. And we do see that now, and when we 
see -- | think this is a little bit of a unique situation in this exhibit, but we do see some like 
protest groups, and they'll target multiple Members all at the same time at their homes. 
And those now they're communicated to the larger leadership at the Capitol Police, in 
addition to investigations. And then we'll coordinate with the Sergeant at Arms Office. 
We'll coordinate with the Member's staff. | will coordinate with MPD if it's here in D.C. 
or wherever they may be living. And so we have a more systematic way of handling 
those sorts of threats now. 

Q Okay. And my last question back on exhibit 3 was just, you know, this was 
just a sort of civilian tip. As far as you know, was the Capitol Police, was IICD receiving a 
number of civilian tips and intelligence regarding January 6th? Do you recall? 

A | don't recall. 

Q_ If we can turn to exhibit 5, and this is a thread where Chief Gallagher sends 
to Chief Pittman, January 5th, 2021, at 4:10 p.m. that the Washingtontunnels.com had 


been receiving a dramatic uptick in new visits; that the site, TheDonald.win, had been 
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active in promoting photos of the tunnel system, and that USCP had identified numerous 
open source comments by groups of their intention of finding tunnel entrances and 
confronting or blocking Members of Congress, including setting up a perimeter to block 
entry or escape. 

The threat includes also that same day at 4:55 p.m., Chief Pittman forwarding the 
intelligence to Chief Sund saying that they should hold a call regarding the intelligence. 
And some later correspondence with counsel from USCP appears to indicate that the call 
never happened. Were you aware of this particular intelligence involving the tunnels 
prior to January Sth? 

A Yes. Not of this email, but of the intelligence, yes. 

Q_ And, before January 5th, it had been something that -- 

Yes. Yes. 

Q Okay. Do you know if this intelligence was communicated by you or 
someone within IICD to leadership, including Chief Gallagher, Chief Pittman, or Chief 
Sund, prior to this email thread? 

A | know it was sent to -- it was Captain Mitchell at the time. And she's the 
head of the Intelligence Division. 

Q Okay. Because certainly -- it appears in this thread that, on January 5th, it's 
something that Chief Gallagher finds really problematic and serious and a warning, but on 
the day of January 5th, it appears to be when he realizes or gets this piece of intelligence? 

A My team sent that forward in late December. I'd have to go back and look 
at the specific email to see who it went to. | know it went to Captain Mitchell -- she's 
not captain anymore; she's inspector, but -- to see who received it, but | know it was done 
in late December. 


Q Okay. Andcan you tell me why this particular piece of intelligence didn't 
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make its way into the January 3rd threat assessment? 

A | don't know why. _ | will say too, though, though, the maps of the tunnels 
existed online for a long time before January 6th. And should we have mentioned that? 
Yes. ItwasonDonald.Win. Probably we should have, but the fact that maps were in 
existence out on the internet was not a new thing. 

Q Sure. | think it's the uptick in view is what Chief Gallagher seems to be 
alluding to there and views, excuse me, leading up to the January 6th. 

If we can go to exhibit 6, Joint Terrorism Task Force Special Agent Usman Saleem 
sent an e-tip that had been sent to the FBI on December 28th, 2020. He sends it to 
Special Agent DeSesso and some colleagues, Mr. Delegan and Mr. Stori, over on the 
Investigations Division, right, U.S. Capitol Police. And the tip included protesters 
bringing arms on a bridge in Virginia, marching into D.C., joining the Proud Boys, and 
blocking roads with their cars. 

First, can you tell me how the role of investigations, right -- so a separate sort 
of -- in the Intelligence Operations threat assessment and criminal, those are the three 
under investigations? 

A Uh-huh. 

Q How they separate in their role in what IICD does? 

A So some of this has changed since the 6th. Like, Agent Saleem and 
Sergeant Delegan work for me now -- 

Q_ -- before 6th? 

A And so they were the task force officers who were embedded in the FBI and 
where have you. And we didn't necessarily get a lot of information from them. Andso 
that's part of the reason why they were realigned under IICD, to better enhance the 


communication and the flow and sharing of information. So, prior to that, | don't know 
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what happened to these -- this sort of information -- it didn't always come to me, | will 
say that. 

Q Okay. Can you tell me just generally, though, what -- how are those three 
divisions conceived? Like, what do they do that's separate from IICD? 

A So they do more of the criminal investigations part of it, and they do -- they'll 
do the subpoenas, they'll do meeting with the U.S. attorney's office and things like that, 
like, the criminal investigators -- similar to what like an 1811 would do in the executive 
branch. They do similar work there. 

Q Okay. Andsol know you said that something like this, unfortunately, 
before would not have made its way to you? 

A Not necessarily. 

Q- Right. And | guess at that time the process wasn't formalized; it would just 


be forwarding it to you -- 


A Yes. 
Q- --basically or to Jack Donahue. Is that fair? 
Yes. 


Q Okay. And so -- and | think you've answered this, but how would you 
validate the level of information sharing between investigations and IICD before 
January 6th? 

A It wasn't great. 

Q And how, if at all, has that changed since January 6th? 

A It's much better now. It's much, much better. | mean, | -- | sit right next 
to Inspector Mitchell, and it's a constant conversation. It's an eight-hour conversation 
every day. And then | have the task force officers under me now. Sol meet with them 


regularly. | meet with the analysts one week and then the task force officers the other 
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week to get updates on the cases they're working on. And they send information all the 
time to us, and then | distribute it out to wherever it needs to go, whether it be 
leadership, whether it needs to be investigations, whether we need to do -- take more 
action on whatever it is. So it's much, much better now. 

Q_ The folks still overriding the investigations, the ones who haven't been 
subsumed under your command, is there a process by which -- a more formalized process 
by which they can get information over to you or to IICD now? 

A There is an SOP in the work, so it hasn't been officially formalized yet, but it 
is in the works. 

Q You said a lot has changed that got better. Are there any still gaps that you 
see that you're still working to try to correct or you think should be corrected in terms of 
that information sharing between the two divisions? 

A No. | think -- | think -- you know, it's a work in progress, and it's breaking 
down a lot of walls that were built before | got there. And so that's going to take some 
time, but as | get new analysts and the analysts that remain who were here before get 
used to communicating with the agents and the agents get to know who | am, that's -- it's 
getting better and better each day. 

Q Last piece of specific -- 


Can |? 


Followup question. So you mentioned that one week you meet 
with the analysts? 


Ms. Farnam. Uh-huh. 


—— For sort of a SIT REP update and then next week with the task force 


officers. Are there any regular meetings where you meet with both sections together? 
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Ms. Farnam. Yes. Ido have once a month, we have a full team meeting. 


 —— 4 Okay. Thank you. 
Cy 

Q  Wecanturn to exhibit12. Andso here, on December 29th, 2020, the 
Protective Intelligence Operations Center at Secret Service forwards to the threat 
assessment inbox at Capitol Police that telegram user GFB said in a Neo-Nazi chat group 
that Trump supporters in D.C. on January 6th should march into the Capitol Building and 
make them quake in their shoes by our mere presence. 

To whom would this tip -- we talked a little bit about investigations, and | know 
threat assessment is under that, to whom would this tips of threat assessments before 
January 6th where would it go? 

A The threat assessment box, my understanding is that it is monitored by the 
sergeants in threats. 

Q Okay. And do you recall seeing or being made aware of let's start with just 
this particular piece of intelligence? 

A | don't recall it. 

Q Okay. And is that -- sort of this threat assessment the same as we were 
talking about in terms of the criminal sections or the other sections of the investigations 
in which there was an issue of information sharing between the division and IICD? 

A Yes. 

Q Okay. Are there -- it appears, you know, there's threat assessment box; 
there's public information box; there's very many different ways for information to get 
into Capitol Police. 

A Uh-huh. 


Q ___Is that -- has that been a struggle in trying to make sure that all that 
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information is centralized and pulled in somewhere? And has that -- what has been the 
solution if that has been a struggle? 

A | can't speak for the other divisions, but within IICD, we did have quite a few 
boxes. Andsol|'ve been working through eliminating some of them. | also did create 
email box specifically for threats so that we knew every single thing in that box needed to 
be worked and needed to be researched so it didn't get swallowed up by all the other 
emails that we get. 

Q Okay. I'd like to talk to you about the demonstrations. So let's talk about 
the -- let's go to exhibit 10, actually, if we can. 


A All right. 


_—<—$—_| Can | ask one more thing? 
BE Go ahead. 
Cy 

Q_ And this is kind of a big picture question, but we've heard in talking to some 
of the Federal partners as part of the intelligence assessments that there was a lack of 
specificity and a lack of credibility with what they were seeing -- 

A Uh-huh. 

Q_ --which led to not a federally issued joint intelligence bulletin about 
January 6th. It strikes me that, asf pointed out, you saw many of the same things 
that our Federal partners saw. And think this was my question before, but I'm trying to 
articulate it better. What tools do you have or did you have to be able to draft that 
paragraph and that January 3rd special assessment so accurately in the sense of, what did 
you see that was credible, or is that even an assessment that you were making in stitching 
it together? 


A I'm trying to think of how to articulate an answer. | think the IC -- going 
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back to your question about domestic terrorism -- the IC, | think, sometimes looks at 
things ina very narrow way. And so they don't necessarily give credibility to things that 
should be given credibility. 

And so me coming at it -- | mean, this is the information | saw, and | had no reason 
to think that it was just aspirational, especially when you see it again and again and again 
and again. And so, for me, | think | had an obligation to accurately portray -- you know, 
the caveats aside of things that could have been phrased better in other parts of the 
report, but for that analysis section, | think | had an obligation to state it like | saw it. 

Q_ And you didn't at any point think that it was in a bucket of this is just 
rhetoric? 

A No, | didn't. | think -- some of the social media posts and they weren't in 
the assessment had like pictures of guns and weapons and knowing that, even with the 
MAGA | and MAGA II march, we had people who had been arrested for weapons charges 
and assault and things like that. Most of that happened after the actual event, but still it 
was attracting those sorts of people. And so, to me, it's something | took seriously. 

Q = And when -- I'm sure you're familiar with Chief Sund, who testified at a few 
hearings, and one of the first -- one of the things he mentioned was our Federal partners 
failed us on the intelligence. What's your reaction to that statement by the chief -- the 
former chief of the Capitol Police? 

A | probably agree with that. | mean, when you look at all of our Federal 
partners, all of our law enforcement partners, how many other agencies wrote an 
assessment about January 6th? Zero. We were the only ones who wrote something. 
And | had only been there 72 days, and | dealt primarily with foreign nationals and foreign 
terrorist organizations. So my expertise was not domestic terrorists. 


| can tell you all about them now a year later, but -- and so -- and maybe that was 
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part of it, too, is that | was coming at it from a different perspective and with fresh eyes 
and seeing these things -- like | said, domestic terrorism was not my area of expertise. | 
think Jack had more of an expertise coming from NYPD than | did, but | dealt with FTOs 
primarily. So maybe that was part of it too. Like, I'm seeing all these things. 

If al-Qaida was saying those things, | would for sure be taking it seriously. So 
why not take it seriously when domestic groups are saying it? 

Q And apart from kind of the silence that you received from the leadership on 
the call that talked about, was there any pushback to what you were seeing? 

A No, there was no pushback. 

Q_ It was silent? 


A It was just silence. 


po Can | ask a followup question? 
BY 


Q So we learned during the course of our investigation that, prior to 
January 6th, there were a number of interagency conference calls with other Federal law 
enforcement partners, Secret Service, DHS, were you and/or Jack part of any of those 
discussions? 

A Yes. 

Q_ And, during those meetings, was there -- did any other partner agencies talk 
about what they were seeing as the threat or what they thought the concerns were? 

A Yes, there was some of that. There was a lot of discussion about the 
movement of people and where people were going to be in the city, where they were 
going to go, where they anticipated issues to be, but yes, there was some discussion 
about people saying they were coming armed. 


Q And earlier you said that you all were the only ones who actually wrote an 
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assessment having had that information exposure from those meetings, did that 
contribute to your surprise that no one else wrote an assessment? 

A Yes. Yes. |mean, some of those participants traditionally don't write any 
assessments, like, some of the law enforcement partners, but, yeah. On the Federal 
level, particularly, it would have been nice to have someone else back up like what we 
were seeing and what we were saying. 

Q And from your perspective -- and | understand this is just probably your 
personal opinion but maybe informed by your experience as well -- who -- on the Federal 
side, who would you have expected to reasonably provide those kind of assessments? 

A The FBI certainly and maybe DHS' INA as well. 


po Thank you, ma'am. 


Ms. Farnam. Can | just grab a water? 

et Of course. 

—_- We should have mentioned it, if anyone needs to take a break like 
for a bio break or just need a break, just let us know. 

Ms. Farnam. | just need water for right now. Thanks. 

7 

Q_ | was going to ask about -- before we move on to the demonstrations, the 
information sharing and sort of the -- between you and Jack Donahue, how was that 
open -- was there an open line of communication between you two? 

A Yeah. | mean, we did -- we did communicate regularly and his office was 
next to mine, uh-huh. 

Q__Interms of demonstrations, if you would turn to exhibit 10. 

A Yep. 


Q On January ist, 2021, this is an email you forwarded that Jesus Lives 
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demonstration paperwork to Lawrence Cook, including a threat assessment that rates the 
religious group as remote. The threat of violence remote. Says quote: Ms. Reitkopp 
advised that neither she nor members of the demonstration have any intention of 
entering Congressional Office Buildings to lobby Members of Congress. 

Can you tell me about these threat assessments devolving individual groups 
generally? So who drafted them within IICD? 

A I'd have to go back and look. 

Q__|don't mean this particular example, | mean generally like who -- 

A Oh, the analysts. The analysts did. 

Q Was that a practice that preceded your time? 

A Yes. 

Q Okay. And what was it -- so, when they included a threat assessment 
level -- remote, high, medium, low -- what was that based on? 

A Theirthoughts. We don't include it anymore, in part, because it's so 
subjective and there were -- there were discussions with some of the analysts over 
their -- because when | came on board, | was reading some of these, and | would change 
the threat assessment level. And I'm like, no, | think this one should be higher. 

And, particularly, Debbie McClellan got upset with me one time. And she said: 
Well, when you change it, that changes the number of officers who have to work. And | 
was like, well, yeah. 

And so there was concern that, if we didn't keep the threat level like remote or 
low, that was going to have operational impact. 

And | was, like, we just need to stop doing that. And so today these assessments 
do not include a threat advisory level because they're too subjective. 


Q And when did that change happen? 


24 


25 


55 


A I'd have to go back and look. It might have happened right before 
January 6th. 

Q  Oh,okay. Before? 

A It could've. I'd have to go back and look. 

Q Okay. This one's January 1st, | believe, for this group? 

A Then it might have been right after. It was sometime in January. 

Q Okay. And1/ guess is there some independent verification going on? So 
here it sort of appears to be relying on self-reporting, but the person in charge says, oh, | 
have no intention of entering Congress. Is it basically just self-reporting or was there 
independent verification that went into these assessments at the threat level? 

A So, with these assessments, there's a few steps that the analyst is supposed 
to be taking. One, is they're supposed to call-up the event organizers and ask a series of 
questions, and we have the list of questions that they should be asking. And 
then -- they're supposed to ask, you know, is civil disobedience expected? Do you plan 
on getting arrested? 

But then they're also supposed to be doing research to see if the group has 
demonstrated on Capitol Grounds previously and were there any issues when they were 
here. And they should also be doing a search to see if they've done other 
demonstrations elsewhere and if they've had any problems. And they should be 
checking their social media, their websites, whatever they may have to see what the 
group is about. 


Q_ Andis that your understanding of what was taking place -- 


A Yes. 
Q - -- when you first joined -- 
A Yes. 
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Q  --thellCD? Okay. 

A We've tightened it up a little bit and we have some guidance documents, but 
generally speaking, yes. 

Q Only if you recall -- in the middle of this exhibit, there are both the 
assessments for Moms for America as well as -- in which they were given -- it's Moms for 
America and Women for a Great America. 

A Uh-huh. 

Q | guess my question is, do you recall whether the assessments for either of 
those are different and it may be a function of you think it's just the subjective view of the 
analyst and so there really isn't any substance behind there, but as far as you recall, was 
there a difference in how you guys viewed Moms for America versus Women for a Great 
America? 

A Just looking at it, | think we would rate that a little bit higher because they 
had participated in a previous "stop the steal" rally and those tend to attract individuals 
who cause trouble. 

Q  Canyou talk a little bit about "stop the steal" and why, in particular, that 
group raised some alarms in your mind? 

A So "stop the steal" they had participated and Ali Alexander, who is the 
organizer of "stop the steal." They had participated in the MAGA | and MAGA II 
marches, and they attract extremist groups. They attract conspiracy theorists. They 
attract people who wanted to overturn the election, and, in my opinion, that's dangerous. 

Q And those were thoughts that you had prior to January 6th. Is that fair? 

A Yes. 

Q Let's talk about exhibit No. 19. And this is on December 16th of 2020. 


A Uh-huh. 
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Q You forwarded an information paper -- 

A Uh-huh. 

Q_ -- regarding events in December as well as a couple planned for January 6th. 
And the only event that is noted as one of concern as opposed to remote concern is a 
Fuck the Police demonstration put by They Them Collective, which is a liberal progressive 
group. 

Can you talk about how that one event drew a higher threat level than the others, 
if you know? 

A So, just knowing historically with this group and the They Them Collective 
and the Youth Liberation Fund, those groups tend to engage in tactics -- they're 
not -- they can be violent, but definitely civil disobedience. They have confrontation 
with the police, and so that would raise the level for that one. 

Q Okay. Some witnesses that we've spoken to have mentioned a sort of false 
sense of security with the demonstrators on January 6th because of a belief from past 
experience that the crowd would be pro-law enforcement. They had previously seen 
maybe the first two MAGA marches that they were not hostile to law enforcement and 
potentially because of the fact that they are groups, you know, pro-Trump demonstrators 
that they would not be adverse or in opposition necessarily to law enforcement. 

Just generally, in your opinion, did that belief, that sort of false sense of security, 
affect the level of concern that pro-Trump demonstrators drew from police on 
January 6th? 

A | can't say one way or the other, but it's something that I've heard for sure. 
Then they took their blue lives flags and stabbed police officers with it. 

Q Right. Sol guess, is it something that you've heard from your colleagues or 


it's not necessarily something that you've had experience hearing? 
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A Not necessarily having experience hearing in my professional role. 
Q Okay. You've just heard it out in the ether of people talking about it? 
Yeah. 


Q If we can turn to -- you have a question? 


ies =] Just related to that last question. 
Fs Yeah. Go ahead. 
fit. es So, along the same lines in speaking with other folks at Capitol 


Police, particularly many of the officers who responded on that day, there was a general 
honest sense that, no matter what actually happened outside, that protesters would 
never actually come into the building. 

Ms. Farnam. Yes. 

BE One, is that -- was that your sense when you got to that -- that that 
sort of was the prevailing thought; and, two, again, from your personal perspective, did 
that impact sort of how people were preparing for it? 

Ms. Farnam. Yes to both questions. | don't think anyone conceived that they 
would break in to the Capitol. Did | think they were going to have violent confrontations 
with the police? Yes. Did! think they would be on Capitol Grounds outside of the 


Capitol Building? Yes. Did | think they would storm the building? Not necessarily. 


as Thank you, ma'am. 
oy 
Q Okay. SoNo. 26, exhibit 26. On December 31st of 2020, you raised 
concern that the permit request for One Nation Under God and Brian Lewis were just 
proxies for "stop the steal," and you were concerned about that because "stop the steal," 
as you've mentioned, is generally known to use more violent tactics. 


Can you tell us a little bit about what was made of this warning? 
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A | don't think anything was. | don't know what the discussions were once it 
got sent forward, but | know that the permit wasn't revoked. 

Q Okay. ‘If you were told, what were some of the concerns regarding having 
this sort of information affect whether | guess the permit was ultimately approved? 

A So the permit had already been approved at this point. So it was a matter 
of raising the concerns to see if the permit would be revoked. | could be wrong about 
the permit being approved, but either way, it didn't impact the issuance of the permit or 
the approval of the permit. 

So, | mean, part of the concerns, as | outline here, is that they're in area 8 and 
"stop the steal" said they were going to be area 8. They didn't say area 8. They don't 
use those words. So they don't know what that is, but they had a map on their websites 
of where people should gather and where they had the map, and where they're showing 
people to gather was area 8. So that was that concern. 

And then we had a meeting with Cindy Chafian, who was the Eighty Percent 
Coalition that morning that | sent the email, and she indicated that Ali Alexander who was 
the head of "stop the steal" would be speaking at the protests on the Capitol. And 
so -- and where he is advertising that he's going to be in area 8, that made me put the 
two things together. 

Q And you may not have been told, but what was your understanding of the 
concerns of possibly either reversing or denying the permit based on this? 

A My understanding is, one, we had never denied a permit; and, two, it's a 
First Amendment protected activity and we have to grant the permit. 

Q Andis that just cultural, your understanding of why maybe the Capitol Police 
had never before denied a permit? _ It's just historical practice? What were the sort of 


values or virtues or thoughts undergirding why you had never before denied a permit? 
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A That | can't really speak to. 

Q Is there anything different now about how permitting is contemplated in 
terms of if there are red flags raised with a particular group? 

A We still haven't denied a permit, but also things aren't fully opened up 
because of the pandemic, but we've -- when there have been concerns, I've raised them. 
And | think we've still granted the permits, but certainly, as a department, we're more 
prepared. Like, if we know that there's a group coming and they're going to be 
problematic -- like the Look Ahead America on September 18th, they were granted their 
permit, but we were prepared if things went south. 

Q Okay. And has there been more open discussion about the possibility of 
denying a permit? 

A _ There has been more discussion, yes. 

Q Okay. 

A And Ido think it will probably happen some day. We just haven't gotten 
the right permit request yet. 

Q And |Ithink you may have mentioned this, at least as September, but as far 
as January 6th, beside denying their permit, did this possibility, you know, that separate 
groups were far more coordinated and potentially just one single group particularly of a 
violent nature, did that affect the threat landscape or the operational plans if you know 
on January 6th? 

A | don't know about that, but | will say aside from the concerns that | raised 
about this one particular permit, | didn't share those concerns with the other people who 
had requested permits on that day. 

Q Okay. So, although these two you were troubled by their connections to 


"stop the steal," the other groups demonstrating you did not have those same concerns. 
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Is that what you mean? 

A Correct. And | think one of them also had a permit for January 7th. And, 
like, after everything happened, they withdrew and cancelled. So that signals to me that 
they were legitimately demonstrating and weren't necessarily intending to be involved 
with the activities on January 6th. 

Q Okay. Sois it fair from your answer that you have a visibility into whether 
with these two particular demonstrations, there was either a heightened police 
presence -- there was something operational that changed as a result of your concern 
that they were serving as proxies for "stop the steal"? 

A | don't know if they did. 

Q Do you happen to know if, like, your concern was borne out on January 6th, 
as in were there issues with these particular demonstrations? Were they apparently 
more aligned with other more violent "stop the steal" demonstrators or -- was something 
borne out -- 

A Not that I'm aware of, no. 

Q_ --that you were aware of? Okay. 


————r Did you speak to anyone other than Cindy Chafian? 


Ms. Farnam. Kylie Kremer and Dustin Stanton. 

Q I'm going to move into just kind of moving forward now, you know, 
recommendations moving forward, things that have changed or should change. 

A Uh-huh. 

Q First, it's my understanding that, you know, some analysts in IICD sent 
internal emails criticizing the preparation for January 6th within the division -- 


A Yes. 
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Q_ --including a claim that, you know, analysts had been reporting for weeks 
that patriot groups are commenting on social media, their intention is to storm the U.S. 
Capitol with overwhelming numbers, but that they, the analysts, were in the dark about 
whether that information was briefed, quote, with the veracity it deserved and not just a 
one-time event assessment. 

A Uh-huh. 

Q What's your response to those criticisms? 

A So, with regards to the veracity one and | did receive that email from Eric 
Hoar. He wasn't at any of the briefings so he can't speak to whether or not | briefed it 
with the veracity it deserved. | assure you, | very much did, and | was one of the only 
people who did so. 

With regards to the other criticisms, | know some of them come from Shelly 
Redmond and Kelly Ray. Those two, in particular, were adamant that they did not do 
social media research and open-source research. So, for Kelly Ray, in particular, | have 
six written examples where she says: |don'tdothat. |don't do opensource. This is 
not my area of expertise. 

So, even if she did -- | don't recall seeing posts from her saying that this is going to 
be bad on January 6th. 

And then with Shelly Redmond, there were also several written instances where 
she talks about how she doesn't have any expertise in social media. 

So, for them to come forward and say, "Well, we knew about it all along and we 
told our leadership," that is inconsistent with the information that | had received from 
them in writing. 

So there's that, and | will say, too, with all the analysts, but particularly those that | 


just mentioned, they were given opportunities to learn open-source intelligence 
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collection. 

And post-January 6th, one of the things that | did -- and this was in the works 
before January 6th, too, | identified foundational trainings that all the analysts need to 
take because they did lack training and not all of that is their fault. 

So some of the trainings that they are required to take now is a basic intelligence 
analysis course, analytic writing, critical thinking, counterterrorism, open-source 
intelligence, and then there's a couple internal ones as well. 

And so, particularly with Kelly Ray, she was offered those courses several times, 
and it wasn't until she was put on a performance improvement plan that she -- and she 
was mandated to take it that she took it. So the skill level wasn't there for most of the 
analysts to forward that and to raise those concerns, and that coupled with the lack of 
desire to improve their professional skills. 

So, | mean, the assessment is what it is and | think, given the circumstances, we 
did communicate that there were going to be armed individuals. We didn't say they 
were going to storm the Capitol, and in retrospect, we probably should have included 
that, but we did say it was going to be violent. We did say Congress was going to be 
targeted, and regardless of what the analysts may or may not have forwarded to me or to 
Jack Donahue, we wrote a good assessment. And the assessment could have been 
communicated within the department better, but we had the intelligence there, and the 
intelligence was there. 

Q Do you feel that the analysts in IICD were kept in the loop about how what 
they were seeing was being communicated across the department and to the leadership? 

A We probably could have done a better job at that. They were kept in the 
loop as far as the intelligence that was being collected because most of them were ona 


lot of the messages that showed, you know, the things that we just talked about. | don't 
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necessarily think that they knew about all the meetings that were happening outside of it. 

Q And |think we answered this, but -- so I'll just give you another opportunity, 
did IICD, in your view, did you guys ring the alarm loud enough regarding the intelligence 
that you guys were seeing in the lead up to January 6th? 

A We could've done better and | think, you know, me being new, not knowing 
who the players were, also | didn't want to ruffle too many feathers and, | think, if this 
happened today, like, | would have been much more vocal and much more adamant 
about ensuring that the correct steps were going to be taken. 

We just had a demonstration recently -- | can't even remember which one it was, 
and we didn't have a planning meeting before it or one wasn't scheduled. And | was, 
like, are we going to schedule something for this? And then the next day we did have 
one. And| think! would have done that, you know, before January 6th, but | didn't feel 
like | was in a position where | could do that at that point. 

Q And when you had written the paragraph for the overall analysis on the 
assessment, you had mentioned earlier that you were worried that -- you said, you know, 
to the effect of, if this is too strongly worded, let me know. Was that a function of just 
being new and being worried about that, or what was your concern? Why did you feel, 
like, maybe -- look, if it's too strongly worded, choose Jack's over mine? 

A Uh-huh. Because it was strongly worded, and | saw what IICD was 
producing beforehand, and it wasn't written like that. And so| didn't know what the 
reception would be to that. | do stand by what | said in the paragraph, and in 
retrospect, it was definitely maybe not even strongly worded enough, but, yeah, | didn't 


know how it was going to be perceived by leadership. 


se et Can | ask a followup question? 
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a So, along the lines of criticism offered by analysts, one of the things 


that we've heard is that the changes that you talked about earlier in some of their minds 
contributed to why IICD folks had an inability to respond appropriately to January 6th. | 
just wanted to get your thoughts on that. 

Ms. Farnam. The changes were necessary, and | think -- they had to be made. 
They had to be made. It wasa failing team. It was an underperforming team. The 
issue became when people didn't want to get on board with the changes, and that was to 
the detriment of the division. 

—_—e| Thank you, ma'am. 
Ys 

Q Since January 6th, what changes have been implemented for the better? 

A So the daily report that used to be issued before January 6th -- actually, 
when | first came on board, that daily report it was long. It was like 10,15 pages. It 
had different threat levels. It wasn't reviewed by a supervisor. It was just -- and no 
one read it. Noone read it. 

And a couple days after -- it was on November 9th, | believe, | met with the 
primary author of that report and! said: You know, | want your feedback on, like, what 
we could do differently with this report. And then we just got busy with other stuff. 

And | know, in the beginning of December, Jack Donahue also sent that person an 
example of what NYPD does for their daily report, and he said: Oh, | want something 
more along those lines. And then January 6th happened, and for a while, we just 
stopped producing it. 

So the daily report we produce now, it's about 4 pages orso. It hastop line 
news. It has the demonstrations for today and tomorrow only in all of the city. It 


doesn't give any ratings as to this is high or low or whatever. It has the congressional 


24 


25 


66 


hearings for that day, and it has intelligence of note. 

So very succinct. That report goes out to all the officers every single day, usually 
in the mornings. Sometimes I'm late, but usually inthe morning. And then we have a 
daily intelligence briefing at noon every day that | give to the leadership and also to the 
police boards, so the Sergeant at Arms Office and AOC participate as well. 

We've standardized a lot of the assessments we do. We have templates for most 
of the assessments that we do now. The templates also have questions on them that 
the analysts should ask so they don't miss something. So it really tries to walk them 
through what they need to collect. 

And trying to think what else we do. We have better communication with our 
partners, both external and internal. And trying to think of some of the other things. 
Oh, | go to Roll Call Quarterly now and speak to the officers directly, and that's been 
helpful. The officers have cell phones now, and they do send me intelligence. 

They're, like, you know: _ | saw this weird posting; | wanted to pass it along to 
you. 

And so | think that's great that they have that, and they feel like they can reach 
outtome. So they have, and they do, so -- 

Q And what changes are there still left to accomplish in your mind? 

A We still -- we're in the process of hiring a lot of new analysts. So that's 
helpful. We've hired some since January 6th, and we're hiring additional ones. The 
biggest gap right now is | am the only supervisor in IICD who has any sort of intelligence 
experience. Sol'ma single point of failure, and | recognize that. 

| have to -- I'm the one responsible for reviewing all the products, and | am always 
scared that | am going to miss something or I'm not going to read something closely 


enough or something's going to slip by me, because | have to review everything. And so 
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that's a problem. Although, we have two new supervisors that we just hired, so that 
should hopefully -- and that have extensive intelligence experience, so that should help 
alleviate some of that. 

We need to improve our cyber intelligence capabilities as a department. | think 
it's something that we didn't give a lot of thought to, but we should. We need to work 
on our Cl and insider threat issues, which, again, | don't think we've done -- given much 
attention to that. Weneed to improve our classified collection capabilities and 
consuming of classified materials because that's a gap there; we're really not doing that 
very much. 

Trying to think. Oh, we don't have visibility into the dark web and the deep web, 
and so I'm working on finding a company that can help fill that gap for us. 

Q Pardon if | sort of sum it up in a way that -- answer, however, you like. Was 
January 6th a failure of intelligence, in your mind? Was it a failure of heeding or 
properly using or posturing with that intelligence? Wasit neither? What would you 
say was the failure there? 

A | don't think it was a failure of intelligence; | think it was a failure to 
operationalize the intelligence. 

Q What sort of recommendations should the select committee make to help 
avoid this from happening in the future, maybe more zoomed out, more general, if you 
have any? Because that is part of our charge is at the end of -- to put out some 
recommendations, things we think should change and if you have any lessons learned 
from January 6th that you think would be good for us to sort of incorporate into our 
report? 

A | have a list. 


Q Okay. 
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A Okay. Sol think we should have some sort of regular conference or 
meeting with our law enforcement and Intelligence Community partners, like in an 
in-person, regular meeting because we don't do that. We talk one-off and things like 
that. And we have monthly meetings that are hosted by different agencies like MPD 
does one, NTIC does one, the COG does one. And we will host one, and | have hosted 
some before a big event that's going to happen on the hill, but | would like to see some 
sort of, like, regular thing that Capitol Police host because that makes us seem more 
approachable, and | think it would enhance the sharing that we have. 

| mentioned the supervisors with intelligence experience already. 

The realignment of all the intelligence components within the Capitol Police, and | 
know that was one of the IGs recommendations. That makes sense to me, because right 
now, even with the TFOs realigned with me, they're still -- they're still getting pulled ina 
couple different directions, and they still are in a lot of -- they still have one foot in the 
investigations division, and it makes it a little bit confusing and more of a gray area 
instead of, like, clear delineation as to what division they work for. 

Having a robust cyber intelligence task force that includes members from the 
House Sergeant at Arms, the Senate Sergeant at Arms, and their IT people, the FBI, CISA, 
Capitol Police, and the AOC. | started -- that's one of the things that | did, too. | 
started bi-weekly meetings with the Intel people here on Capitol Hill, and they found that 
useful because | don't think there was much sharing of cyber intelligence prior to that. 

| mentioned the development of a Cl insider threat program and providing an 
education program for all of the Hill and also developing reporting mechanisms. | know 
that the FBI has primacy on those sorts of cases, but we don't communicate or they don't 
communicate, we don't communicate how those things should be reported. 


Have position-specific performance standards. Like, | did that for IICD with our 
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analysts, but that was unusual, and I've gotten some pushback onthat. But it makes 
sense to me that we would have position -- a specific performance standards. 

We need to have better HR support, particularly when there's -- not to throw you 
under the bus -- OGC support when it comes to problematic employees because a lot of 
the issues with some of the analysts that | have on my team have existed for years before 
| ever came on board. And, if those problems had been dealt with adequately when 
they started to be a problem, we wouldn't be and IICD would not have been in the 
situation it was in on January 6th. 

| mentioned the clear chain of command with the TFOs. Providing clear 
distinction between the intelligence analysts, and | know they're thinking about hiring 
criminal analysts, and just making sure that they're distinct and that they're different 
occupational series, so there isn't some, like, graying of what their roles are. Because if 
that gets eroded, then we're going to be back to square one. 

And then the last thing | have is that we need to have original classification 
authority. There are things that the Capitol Police produce, like evacuation routes and 
maps and things like that, that should be classified, and they're not. And we don't have 
original classification authority, so we should have that. 

ol | want to turn to my colleagues, see if there are any questions 
before we wrap up. 

BE Couple of followup questions. 

So, with specific reference to your recommendation about HR support and about 
problems having dealt with adequately before, from your perspective, is that an HR issue 
or could it have been the failure of people who are in management at the time not 
dealing with the issue? 


Ms. Farnam. Ithinkit's both. | think, you know, coming from DHS, when there 
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was a problem employee -- so every directorate at my previous agency, which is 
equivalent to the bureaus here at Capitol Police, they had a labor and employee relations 
specialist who was assigned that directorate. And, when there were problems, they 
were the person you called. 

They walked you through the -- whatever it is, they helped you write if you're 
going to write someone up, if you're putting someone on a PIP, they would help you, and 
they would be with you hand in hand. And that saved time and money in the end. 
Because if you terminate an employee, to have all your ducks in a row beforehand 
instead of getting to the end of it and being like, oh, well, actually, you should've done 
this and that andthat. And so it just is more efficient as an agency to have that 
assistance beforehand to give managers those assistance. 

And, yes, there are always in any fields managers who don't want to have those 
conversations because no one likes having those conversations with difficult employees, 
but they need to be had. But to have that support because | feel -- it's very different 
here in Capitol Police than it was at DHS, and the way things are done with HR is different. 


And so, like, if | don't proactively go out and seek the answers, | won't have any support. 
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[2:58 p.m.] 
7 

Q Understood. lappreciate that. My final question is, how would you 
define the stature of the director or associate director for the IICD position within Capitol 
Police pre-January 6th and post-January 6th? 

A It's almost, like, the pendulum has swung from one direction to the next. 
Like, before, no one really cared about intelligence, and now | do feel a lot of pressure, 
like: Julie what's going to happen. 

I'm not clairvoyant. | can tell you what the intelligence says, what the 
intelligence that's available, and the intelligence that | have. But! can't predict, saying 
that this will definitely happen. But! do get a lot of pressure and a lot of questions now, 
like: Tellus. Do we put the fence up? Like it's pressure on me. 

Q So it sounds like you feel like the people are listening more to what you say. 
Would you say people listening more to what IICD says even at the highest levels of the 
Capitol Police senior leadership team? 

A Yes, definitely. And1| get questions regularly now when people call me up 
and say: What do you think about this, and what are you hearing? What are you 
seeing? 

Q_ And have you seen an increase in the operationalizing of that intelligence? 


A Yes. Yes, definitely. 


—————— | Thank you, ma'am. 
Y 
Q Ms. Farnam, this has been incredibly helpful. And | -- I'm going to apologize 
because | wants to do a little bit of a deeper dive on the permits and those meetings that 


you had. 
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A Uh-huh. 

Q_ Asyou probably know, the committee is -- has a mandate and have broken 
up into different teams. And one of us is investigating kind of the rally organizers and 
attenders. Sol wanted to just unpack those meetings that you had. 

A Uh-huh. 

Q | know you said you had meetings with Cindy Chafian and Kylie Kremer and 
Dustin Stockton. 

A Yes. 

Q Were they separate meetings? 

A Kylie and Dustin was one meeting, and Cindy Chafian was a separate 
meeting. But we tended to have them, like, back to back. 


Q Okay. And what -- it was my understanding before you said this -- 


A Uh-huh. 

Q_ --which is probably why now we're just talking this through -- 

A Uh-huh. 

Q_ --is that there was -- the permits would come through a different division. 


So why don't we just start with what the role IICD had in terms of vetting them. 

A So the permits, these meetings, and | should have clarified, were with a 
bunch of different agencies. So MPD was on the meetings. 

Q Uh-huh. 

A NPS was on the meetings, and my understanding is the permits were issued 
by NPS. They weren't issued by Capitol Police. 

Q Okay. So, even though National Park Service was issuing it because it was 
for The Ellipse, you still attended the meetings. 


A Yes, we did, uh-huh. 
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Q_ And what -- how was that set up? ~=Was it, like, a Zoom call or a -- 
A Yes, 

Q Okay. 

A | don't think it was Zoom but, like, Webex or something like that. 
Q Okay. And Kylie Kremer and Devin -- 

A Stockton. 

Q_ --and Stockton were together, Dustin Stockton. 

A Uh-huh. 


Q Let's start. Who was the first kind of meeting? Would it have been Cindy 
Chafian? 

A Probably, yes. And she was, as you know, she was the organizer for the 
MAGA | and MAGAII. And then they had a -- and she was associated with the Women 
for America First. And then they had a falling out, and that's why they split. 

Q- Right. |knowthat. How do you know that? 

A | think Cindy Chafian was pretty candid about it. And then we knew that 
they had split because they were having two events and -- they were having two events. 

Q_ For the 6th. 

A Yes, uh-huh. 

Q Did she mention that, though, during -- during kind of whatever the meeting 
was? 

A Yeah, she made some snarky comments. And that's, like, the technical 
term forit. But, yeah, she had made some comments, and then | had asked. | 
remember asking -- 

Q Just for the record, who was the falling out with? Cindy Chafian fell out 


with -- 
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A With Women for America First. 

Q Okay. And whoran that? 

A Women for America First for the 6th was or at least the organizing and the 
meetings that we had were with Kylie Kremer -- 

Q Okay. 

A -- and Dustin Stockton. 

Q  Gotit. Which is why they worked together. 

A Yes, uh-huh. 

Q What organization then was Cindy Chafian representing in terms of getting 
the permits for? 

A She called her organization the Eighty Percent Coalition. 

Q Okay. 

A | think there was another organization in existence with the same name that 
was not affiliated with her because | remember googling it, and there wasn't a huge web 
presence for her organization. 

Q- And was there -- what kinds of questions are asked during this meeting in 
terms of the permits? 

A So and this is pretty typical of any of them. Weask how many people are 
they expecting. There's a lot of, like, logistical questions, like where are you going to 
have Porta Potties and where's your stage going to be, things that don't necessarily 
interest me. But I'm interested, and I'm listening in because | want to know are 
Members of Congress going to be attending? Are they going to be coming to the 
Capitol? Who are your speakers going to be? Things of -- things like that are the 
things that interest me. 


Q__ So, just because it was at The Ellipse, you still took an interest in what was 
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happening there. 

A Correct, yes. 

Q And| know you mentioned Ali Alexander. Who mentioned Ali Alexander? 
You never met with him. But who spoke of him? 

A | don't recall who. | mean, | know he spoke at the MAGA | and MAGA Il, 
and | know Cindy Chafian spoke about him in relation to those. Sol don't remember 
who mentioned him. 

Q Was he of interest to the IICD? 

A Yes, very much so. 

Q Were you guys tracking him in anyway? 


A We were tracking "stop the steal." So indirectly tracking him. 


Q Were you familiar with -- what organization did he lead? 

A "Stop the steal." 

Q What about did you learn of an organization called One Nation Under God? 
A It sounds familiar, uh-huh. But! primarily associated him with the "stop 


the steal" movement. 

Q But because the "stop the steal" did not have a permit -- 

A Uh-huh. 

Q = --and | think JR asked you these questions -- was that part of your 
concern, knowing that January 6th was essentially a "stop the steal" rally? 

A Yeah, yes. 

Q And what was your belief after speaking with Cindy Chafian and Kylie Kremer 
and Dustin Stockton? 

A | mean, | was definitely worried. | know someone from MPD, | think it was 


Commander Glover, kind of, he -- he said something along the lines to Cindy Chafian: 
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Every single time you come in town, we have problems. And1| want to make sure that 
you are making sure that your participants are going to behave themselves. 

And he didn't say "behave themselves" but something along those lines. 

Q Who said that? 

A Commander Glover. 

Q From Capitol Police? 


A No. MPD. 


Q Okay. 

A Uh-huh. 

Q And what was the response? 

A And she's, like: All the problems were not my participants, people who 


participated in mine. | can't be responsible for what they do after the rallies. And 
something along those lines. 

Q Was there any pointed question about Ali Alexander at any of those 
meetings? 

A Not that | recall. 

Q And how many meetings were there? There was one with Cindy Chafian. 

A There were acouple. I'd have to go back and look at my calendar, but 
there was more than one. 

Q_ That would be helpful. What -- was there an estimate of crowds during 
these conversations? 

A Yes, there was. 

Q And what was the outer number? 

A I'd have to look. | know for | believe it was The Ellipse one they estimated 


20,000. It could have been the Freedom Plaza. I'd have to go back and look at my 
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notes. 


p 


Okay. 


> 


Uh-huh. 
Q_ That would be helpful. 
A Uh-huh. 

Q And were they all kind -- what was your sense? That they were 
coordinating with each other? 

A Not at all, no. 

Q Why do you say that? 

A The impression that | got was that Cindy Chafian hated Kylie Kremer and 
Dustin Stanton. 

Q _ And that's from what she said in the comments? 

A | mean, yeah, there was that. And then there was the falling out, and there 
was a discussion as to what caused the falling out. 

And | remember having to drop off the call and then calling up MPD, Shane 
Lamond, Lieutenant Lamond, and asking him, like: What happened? | had to cut out. 

It was, like: Drama and scandal. 

And he said there was an argument over one of the bus rides at the last march, 
and that was the impetus for the falling out. 

Q But was the impression for anyone during -- at the end of this that there was 
an overall organizer? Or did it seem like disparate groups were coming together on 
January 6th? 

A Not an overall organizer, but there was an overall population they were both 
drawing from, and it was the same population, if that makes sense. 


Q_ No, that totally makes sense. 
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A Uh-huh. 

Q But there wasn't one -- was there a sense that there would be one event or 
different events going on at the same time? 

A Different events, different events because Cindy Chafian had her own 
speakers -- and | forget who they were -- for the 6th. And then the President, of course, 
was the big speaker at The Ellipse. 

Q When did it all come together? Did you -- did you realize it before 
January 6th? 

A Yes, yes. | mean, | think we always knew, even with the division between 
Women for America First and Cindy Chafian, we always thought that it was going to be 
the same people, and the people may go between events. And it was always going to 
attract the same crowd, both events. 

Q_ If wecan -- yeah, if you could check your -- the notes, if they had given any 
sense of the crowd numbers, that would be helpful. 

And then did you, after these conversations with -- well, let me go on to Kylie 
Kremer and Dustin Stockton. Was there anything unusual that you remember from 
those conversations? 

A With Kylie and Dustin, | felt that they were being cagey, like they weren't 
giving us the full picture, because | know we asked pointed questions about, like, is the 
President coming? Who's been invited? What arethe plans? And they were not 
forthcoming with that information. 

Q Was there any follow up with that? 

A There eventually was, but | think we did the follow up through Secret Service 
and not through them. 


Q___ Did you learn that they were -- there was a separate security group that they 
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had hired or -- 
A I'd have to go back and look at my notes. 
Q Okay. 


That doesn't sound unusual to me because a lot of -- like even Cindy Chafian 
had her own security. And most demonstrations that happen in the city, especially big 
ones, will hire security. So that's not unusual. 

Q- Okay. ‘| think that -- | think there's probably more questions that I'm not 
covering. But we'll follow up with you about them. 

But | think the big -- the big question was whether -- | guess did you have 
any -- knowing that Ali Alexander had not asked for a permit for "stop the steal" 
organization but having had these conversations with Kylie Kremer, Cindy Chafian, and 
such, did you feel that -- what did you think in terms of the anticipation or potential for 
violence? 

A | thought there was going to be violence for sure. | mean, the groups that 
Women for America First, which at that time was Kylie and Dustin, and then Cindy 
Chafian and the groups that she attracted, and even just like the speakers they've 
had -- they had some, like, like Alex Jones. And Ali Alexander was one of the speakers 
previously. These are, this is my opinion, these are people who are not in touch with 
reality. And they have large followings, and their followers believe what they say. 

Q Yes. That's -- I'm wondering whether and how that played out 
operationally for you all, the Capitol Police. 

A | mean, | raised the concerns particularly with "stop the steal." And | know 
there were discussions about the map that they had on their website, indicating that they 
were going to be on Capitol Grounds. There was also a discussion about potential 


members speaking at the "stop the steal" event. And what operational decisions were 
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made in relation to that, | don't know. But! know it was communicated. 

Q Do you remember the name Nathan Martin? 

A | don't. 

Q Okay. So, if we could just follow up with your notes, that would be great. 

And the only other -- other thing that | have, because this is really -- this has been 
incredibly insightful, and | really do appreciate it. I'm just -- | just want you to be able to 
answer as much as you can, whether it's your training or your experience. 

A Uh-huh. 

Q And|know you said you mentioned you kind of came as this with fresh eyes, 
looking at this as domestic terrorism. But what was your training before for you to have 
been able to kind of get that paragraph particularly so right? 

A __ This is going to be like anticlimactic because, like, | mean, | was traditionally 
an immigration officer. And so and that's, like, | started -- before the government. | 
worked for the International Rescue Committee in their Immigration Clinic. | worked at 
Emerson College in their international student -- students’ office, doing the immigration 
work there. AndI|hadanepiphany. Like why don't | do this for the government? 

And solapplied. | applied 2 weeks before | graduated grad school. And| was, like, if | 
don't get this job, | don't have a Plan B. 

So, fortunately, | did, and then | had a 15-year career in immigration. And | will 
say, before | get into the intelligence part, there is a lot of crossover between the skills 
needed to be good at my job in immigration and the skills needed to be good at my job in 
intelligence. And that is be there's a lot of fraud, as you know, and there's lot of 
national security issues in immigration. 

And so looking at information with a critical eye | think is what helped me become 


good at intelligence. And so| had worked for several years as the advisor to the 
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Director of Field Operations at U.S. Citizenship and Immigration Services, and then | 
switched over to the Fraud Detection and National Security Division about 3 years before 
| came over here. 

And that's when | started to get into intel. And| was selected for that position 
not because of my great intelligence skills but because | was a good leader. And they 
had an underperforming team, a team that needed to be reorganized. And they 
thought | would be good at that. So they did send me down to FLETC in Charleston for, 
like, basic intelligence training. And | did that training. 

And then | was very focused on training my analysts as well. So almost weekly | 
would have trainings for them, and sometimes they would be trainings on specific 
classified systems. We'd get the owners of the systems to come in and show us how to 
do searches and things like that. Sometimes they would be trainings on like we did a 
training on naming conventions in Iraq. So we would make sure that we were searching 
for names correctly and exhausting our searches. 

And then some of them were, like, soft skills. Like | had emotional intelligence 
training and all of those things. So! was very focused on training, and | attended almost 
all of the trainings as well. And sol got to be quite good at what | did as far as finding 
information in the intelligence realm. 

And | think, to be good at intelligence, you have to have two characteristics. One 
is you need to have a natural curiosity, and| do. My mom always told me | was nosey 
when | was little, and now I've made a career out of it. And then you also be -- have to 
be comfortable in the gray areas because there is nothing in intelligence that's black and 
white or very rarely. 

And so taking those skills here to the Capitol Police, | think, looking at what | was 


seeing, it was -- | tend to be a very, like, logical person. Andso| look at things from a 
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logical sense, and | don't try to fill in the gaps necessarily. 

So what | saw is what | wrote and very -- | guess it's very literal. And, to be 
honest, | was sitting in my bed, writing that, and | wrote it in about less than 5 minutes. 
And | was, like: Okay, here itis. This is -- there wasn't -- | mean, | just wrote what | 
saw. There wasn't a whole lot of, like, analysis and thought, like let me wordsmith this. 
And it was just literally less than 5 minutes. 

Q This is my final question, | promise. What should they have done? As 
everyone says, intelligence drives operations. 

A Uh-huh. 

Q What should they have done, Capitol Police, based upon that January 3rd 
special assessment? 

A _ They should have -- they should have coordinated with partners better. 
They should have worked with Congress to see about either locking down the building or 
at -- which | don't think we've ever done but taken some of those steps to secure the 
building more than just having people outside of the building. They should have -- they 
should have been ready for war, and they weren't. They were -- they were very much 
outnumbered. That's what it came out to is they were outnumbered. 

And so | think, if they had been better prepared and they had coordinated more 
with other partners, whether it be law enforcement partners or Congress as a partner, | 
think they would have been better prepared. 

= =I Thank you. Thank you so much. 


i So my final question just, is there anything | didn't ask you or that 


none of us asked you that you wish to share with the committee? 


Ms. Farnam. Idon'tthinkso. Thank you. 


= ——— I Thank you so very much. ‘That will end our interview. 


Ms. Farnam. Okay. Thank you. 


[Whereupon, at 3:16 p.m., the interview was concluded.] 
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